Password Policy and Account Lockout Settings
This article outlines the current password requirements, account recovery process, and authentication options available in Business Engine Administration Portal
Password Requirements for the Administration Portal
-
Passwords must be at least 8 characters long.
-
No additional complexity rules (such as requiring numbers, symbols, or uppercase letters) are enforced at this time.
Password Recovery
-
A "Forgot password" option is available on the login screen.
-
If the user’s email address is registered, a reset link will be sent via email.
-
The reset link is valid for 7 days.
Account Lockout Settings
-
Currently, the Admin panel does not enforce any account lockout mechanism.
-
There is no limit on the number of failed login attempts before an account is locked.
Single Sign-On (SSO) Support
-
SSO using Google and/or Okta is available now.
-
All users will see the SSO sign-in button, but only users with SSO-enabled accounts will be able to log in with it.
-
We recommend using SSO for enhanced security.
Two-Factor Authentication (2FA) Support
-
2FA is available.
-
When enabled, an email with a confirmation link is sent upon each login attempt.
-
The login is only completed after the user clicks the confirmation link.
Summary
-
Password: Minimum 8 characters, no additional complexity rules.
-
Password reset: Via email link, valid for 7 days.
-
Lockout: No failed-attempt lockout in place.
- SSO: Available (Google and Okta).
- 2FA: Available (confirmation link via email on login).