MFA Settings

MFA authentication applies

To

The scope of the settings.

• All users → all users using TrustBuilder Authenticators

Secret code

Block secret code after

Set the maximum number of wrong secret code a user can enter.
If the limit is reached, the secret Code is blocked and the user should request a reset code.

Default: 3 trials.

Default policy applied

Choose the secret code format users must follow:

• pin6: 6 digits

• intermediatepass: 8 to 20 characters including at least: 1 digit, 1 lower-letter, 1 capital-letter.

• pin8: 8 digits

• pin46: 4 to 6 digits

• strongpass: 8 to 20 characters including at least: 1 digit, 1 lower-letter, 1 capital-letter, 1 special character.

• + Create a new format:

  • Enter a name

  • Define the minimum and maximum length.

  • Specify authorized characters and the minimum occurrences required per character type.

Default: pin6.

Digit-only keypad layout

Applies to digit-only formats

This parameter controls the order of the digits displayed on the keypad in TrustBuilder Authenticator Mobile and Desktop (version 7.9 or higher).

• Randomized: the keypad shows digits in a random order each time.

• Static: the keypad shows digits in the standard ordered layout.

Reset code

Self-service code reset

If enabled, users can trigger a reset code sending if they block or forget their secret code.

If disabled, admin (or helpdesk/support) intervention is required.

Code expires after

Set the validity period of the reset code (in minutes).

Default: 15 minutes.

Distribution mode

Defines the way the reset code will be provided to users:

• Share code manually: the code will have to be shared manually.

• Send by email: the code will be sent to the user's email address (if available).

Biometric settings

Biometric authentication

This parameter applies currently to TrustBuilder Authenticator Mobile only.

• If enabled, users can use biometrics to authenticate instead of their secret code.

• If disabled, users cannot use biometrics to authenticate.

Registered devices

Max. devices

Set the total number of devices allowed per user.

Max. devices per type

Set the limit per device type for a user.

Block device after inactivity

Automatically blocks devices when not used after x days.

Authentication methods

Indicates which methods these settings apply to.