Manage Login Policies

Login Policies consist of two areas: Password Policy and Account Lockout Policy.

Configure them in IAM → Security → Login Policies.

Password Policy

Define rules applied when creating or changing passwords.

Field	Description
Length	Minimum and maximum password length (slider)
Requirements	Checkboxes for uppercase, lowercase, digits, and special characters
Exclude rules	Rules preventing use of personal information such as username or email
Password history	Number of previous passwords to prevent reuse
Password expiration	Password expiration period toggle (ON/OFF)
Prevent password reuse	Block reuse of last N passwords
Password generation period	Password change frequency (in days)

Configure Password Policy

1. Select the Password policy section in the Login Policies tab.
2. Adjust the minimum and maximum length with the Length slider.
3. Select the required complexity rules in the Requirements checkboxes.
4. Optionally enable the Password expiration toggle and set the period.
5. Click Save.

Account Lockout Policy

Configure account lockout behavior after login failures. The settings vary by Lockout Type.

Lockout Type Options

Lockout Type	Behavior
Lockout temporarily	Auto-unlock after a specified duration
Lockout permanently	Remains locked until an admin manually unlocks
Lockout permanently after temporary lockout	Escalates to permanent lockout after repeated temporary lockouts

Lockout temporarily settings

Field	Description
Max Login Failures	Consecutive failures before lockout
Backlog to consecutive limit time	Time window for resetting failure count

Lockout permanently settings

Field	Description
Max Login Failures	Consecutive failures before permanent lockout

Lockout permanently after temporary lockout settings

Field	Description
Max Login Failures	Consecutive failures before temporary lockout
Maximum Temporary Lockouts	Number of temporary lockouts before permanent lockout
Backlog to consecutive limit time	Time window for resetting failure count
Reset countdown	Temporary lockout count reset interval
Max Wait Time	Maximum temporary lockout duration (minutes)
Pattern Max Size	Maximum pattern record size

Configure Account Lockout Policy

1. Select the Account lockout policy section in the Login Policies tab.
2. Toggle Account Lockout Policy to ON.
3. Select the lockout type from the Lockout Type dropdown.
4. Fill in the fields for the selected type.
5. Click Save.

Delete Lockout Policy

1. Click Delete lockout policy at the bottom of the Account Lockout Policy settings.
2. Enter the reason in the confirmation dialog and click Delete.

WARNING

Deleting the Account Lockout Policy disables automatic lockout on login failures. Consider your security requirements before proceeding.