TrustBuilder Authenticator Settings

Applies

To

The scope of the settings.

• All users → all users using TrustBuilder Authenticators

On

List of methods these settings apply to.

Secret code format policy

Number of failed attempts before blocking

Set the maximum number of wrong secret code a user can enter.
If the limit is reached, the secret Code is blocked and the user should request a reset code.

Default: 3 trials.

Default policy applied

Choose the secret code format users must follow:

• pin6: 6 digits

• intermediatepass: 8 to 20 characters including at least: 1 digit, 1 lower-letter, 1 capital-letter.

• pin8: 8 digits

• pin46: 4 to 6 digits

• strongpass: 8 to 20 characters including at least: 1 digit, 1 lower-letter, 1 capital-letter, 1 special character.

• + Create a new format:

  • Enter a name

  • Define the minimum and maximum length.

  • Specify authorized characters and the minimum occurrences required per character type.

Default: pin6.

Biometric settings

Authorize biometrics

This parameter applies currently to TrustBuilder Authenticator Mobile only.

• If enabled, users can use biometrics to authenticate instead of their secret code..

• If disabled, users cannot use biometrics to authenticate.

Reset code settings

Authorize self-service reset

Allows users to trigger a reset code sending if they block or forget their secret code. If disabled, admin (or helpdesk/support) intervention is required.

This parameter is not fully functional yet.

Lifetime of the reset code

Set the validity period of the reset code (in minutes).

Default: 15 minutes.

Distribution mode

Defines the way the reset code will be provided to users:

• None: the code will have to be shared manually.

• Email: the code will be sent to the user's email address (if available).

Trusted device settings

Max number of devices

Set the number of device a user can have.

• per user → set the total number of devices allowed per user.

• per type, per users → set the limit per device type for a user.

Trusted devices automatically blocked after x days of inactivity

Automatically blocks trusted devices when not used after x days.

Authentication methods

Indicates which methods these settings apply to.