Account Lockout

Overview

HySecure provides support to lockout users based on specific conditions, on a per User / User Group basis. The conditions help in handling the following use cases

1. the user access is to be provided for a specific duration post the first login

2. Mimimum frequency at which the user should log in. This is typically useful in cases where access is given to vendors who are expected to login at specific intervals but fail to do so.

Configuration Workflow

This section defines the workflow for creating a "Notification" type of Access Control.

1. Identify the User / User group for whom the Access Control needs to be made effective. The set of users will either be

   1. part of an Authorization Server associated with an Authentication Domain which is attached to a HySecure Domain OR

   2. part of a High / Low Security native User Group OR

   3. a High / Low Security native User

2. Configure the duration after first/last login, at which the specified user OR users of the specified User Group will get locked out.

3. Configure the Access Control validity and the state of this Access Control.

Preference in case of multiple Account Lockout Based Access Control

In case of multiple Account Lockout based access controls, the first one which matches would be effective.