NF1.0 User Locking

Feature: User Locking

Goal: Security

Sponsor: Trek Global

Description:

This new feature allows implement user locking on some events:

• Maximum account locking in minutes
• Maximum inactive period in days
• Maximum number of login attempts
• Maximum password age in days

These parameters are configured in "System Configurator" window

• USER_LOCKING_MAX_ACCOUNT_LOCK_MINUTES
• USER_LOCKING_MAX_INACTIVE_PERIOD_DAY
• USER_LOCKING_MAX_LOGIN_ATTEMPT
• USER_LOCKING_MAX_PASSWORD_AGE_DAY

How to configure the system to lock the user account at the third failed attempt login:

1. In "System Configuration" window, find record "USER_LOCKING_MAX_LOGIN_ATTEMPT".

2. Set value for field "Configured Value".

* To third attempt failed, the user account will locked

Technical Info: IDEMPIERE-373