Change User Authentication Settings

This topic shows you how to change user sign in preferences, session timeout settings and how user names are displayed in the banner for logged-in users.

Change sign in preferences for all users

You can limit the number of unsuccessful sign in attempts permitted before a user account is temporarily disabled. When this preference is enabled, five unsuccessful sign in attempts within any ten minute time frame will automatically disable a user account for ten minutes. For information on manually re-enabling user accounts that have been disabled, see Edit or disable user accounts.

You can also change how users sign in to Commander by allowing them to enter the domain their user account is associated with, or by automatically populating the domain field that their user account is associated with. These preferences are designed for use if the same user name exists on multiple LDAP servers, or if you do not want users to manually enter the domain name every time they sign in.

1. Go to the Authentication tab.
2. In the Sign In Preferences section, select Edit.
3. Configure one or more of the following:
• To limit the number of unsuccessful sign in attempts permitted before a user account is temporarily disabled, select Limit Sign In Attempts.
• To display the domain field on the sign in screen, select Display Domain Field.
  OR
• To display the name of the default domain on the sign in screen, enter the domain in Default Domain.
4. Select OK.

To disable any of these preferences, clear the checkboxes or the default domain field in the Sign In Preferences dialog, and then select OK.

Change the session timeout period

The session timeout for Commander users and for Service Portal users is used to control how long Commander is available during a period of inactivity before it automatically logs a user off. As long as a user is working with the system within the period of time specified, Commander does not automatically log off the user.

The session timeout period is a system-wide timeout and affects all users.

1. Go to the Authentication tab.
2. In the Session Preferences section, select Edit.
3. In the Session Preferences dialog, enter a new period of time as required for Commander and for the Service Portal.
4. Select the unit (seconds, minutes, or hours) from the menu.
5. Select OK.

If you are using SAML SSO, you will need to configure Commander session timeouts and the IdP session timeouts to work together. For more information, see Configure SAML SSO.

Change the display format for user accounts

You can configure what account information is displayed for a session user. The following options are available:

• Username
• First name and last name
• Last name and first name
• Email address

The session information is displayed at the top-right corner of the Commander menu.

1. Click the Authentication tab.
2. In the Session Preferences section, click Edit.
3. In the Session Preferences dialog, for User Display Format, select the format you want to use and click OK.