General settings#

On the tab General settings of the section Authentication you can set:

  • default authentication level - specify:bdg-primary:First factor to require users to verify the first authentication factor only (except for users whose settings include the need to verify the second factor). Specify First and second factor to require users to verify the second authentication factor in addition to the first factor;

  • session duration parameters:

  • session inactivity timeout;

  • maximal session timeout.

  • account memorization mode - specify Memorize one account to make each login by a new account in the browser overwrite the memorized login of the previous account or :bdg-primary: Memorize all accounts so that each login by a new account adds another account to the list of memorized accounts in the browser;

  • displayed username - the username that is displayed on the login page. It is specified as a regular expression, for example: ${family_name-} ${given_name-}. This regular expression allows displaying the last name and first name of the user stored in the family_name and given_name;

  • displayed user ID - account ID, which is displayed as the second line on the login page. It is specified as a regular expression, for example: ${email-$phone_number}. This regular expression allows to display one of the contacts stored in the email or phone_number attributes (if both are present, email is displayed). You can use value masking when customizing. For example, the ${phone_number&maskInMiddle(3,3)} rule will display the middle numbers of a phone number as *;

  • an indication of the need to display an avatar on the login page;

  • logout screen display time (in seconds) - how long the logout screen will be shown to the user before the user is automatically redirected to the application transition page after the logout.