Skip to main content

GeneralSettings

New general settings.

Properties

NameTypeDescriptionNotes
adminUserAuthenticationSessionLifetimeIntegerThe amount of time in seconds admin user sessions remain active without user interaction before automatically expiring. If not specified, then authenticationSessionLifetime value is used.[optional]
authenticationSessionLifetimeIntegerThe amount of time in seconds standard user sessions remain active without user interaction before automatically expiring. Default is 900.[optional]
authenticatorActivationTypeAuthenticatorActivationTypeEnumA setting that indicates the type of token automatically created for the user when it is created. Choices are NONE, ENTRUST_SOFT_TOKEN or GOOGLE_AUTHENTICATOR. Default is ENTRUST_SOFT_TOKEN.[optional]
corsEnabledBooleanA flag that indicates if CORS is enabled for this account.[optional]
corsOriginsList<CorsOrigin>A list of origins that cross-origin requests are allowed from.[optional]
defaultGridBooleanA flag that indicates if a grid card is created for the user when it is created.[optional]
defaultMobileSmartCredentialBooleanA flag that indicates whether to automatically enroll a smart credential for the user when it is created. Default is false.[optional]
defaultPasswordBooleanA flag that indicates if a default password is created for the user when it is created. Default is true.[optional]
dynamicLinkingTransactionLifetimeIntegerThe amount of time in seconds before a dynamic linking transaction expired. Default is 300.[optional]
enableEnhancedAuthenticationDetailsBooleanIndicates whether to enable Enhanced Authentication Details or not.[optional]
inactivityGracePeriodIntegerThe amount of time in seconds that administrators can grant for users.[optional]
lockoutCountIntegerThe number of failed authentications before a user is locked out. Default is 5.[optional]
lockoutLifetimeIntegerThe amount of time in seconds before a user lockout expires. A value of 0 means the lockout never expires. Minimum is 0. Default is 0.[optional]
lockoutModeLockoutModeEnumThe lockout mode to use for your IntelliTrust account. The AUTHENTICATOR lockout mode means a per-authenticator lockout will be enforced. When a user locks an authenticator they can no longer use that authenticator but can still use an alternative authenticator to log in. The USER lockout mode will lock out a user if any of their authenticators have been locked.[optional]
manageInactiveUsersBooleanIndicates whether to block users who have not authenticated for a time being.[optional]
maxFIDOTokensPerUserIntegerThe maximum number of FIDO tokens that a user can have. Default is 5.[optional]
maxFacesPerUserIntegerThe maximum number of Face Biometrics that a user can have. Default is 5.[optional]
maxGridsPerUserIntegerThe maximum number of grids that a user can have. Default is 5.[optional]
maxNumberOfPushTransactionsQueuedIntegerMaximum number of queued push transactions. Default is 1.[optional]
maxSmartCredentialsPerUserIntegerThe maximum number of smart credentials that a user can have. Default is 3.[optional]
maxTokensPerUserIntegerThe maximum number of tokens that a user can have. Default is 5.[optional]
pushAuthenticationLifetimeIntegerThe amount of time in seconds before a push authentication requires expires if a response is not received from the mobile application. Default is 300.[optional]
pushTransactionLifetimeIntegerThe amount of time in seconds that a push transaction can be queued. Default is 60.[optional]
registrationPeriodIntegerThe user registration period in days. Default is 0. Deprecated: use the SelfServiceSettings registrationEnabled attribute.[optional]
showOnboardingWizardBooleanIndicates whether the Get Started wizard should be shown or not.[optional]
smartCredentialDefnStringThe UUID of the Smart Credential Definition to use when a user enrolls a Smart Credential.[optional]
userInactivityThresholdIntegerThe amount of time in seconds for a user to be inactive.[optional]

AuthenticatorActivationTypeEnum

NameValue
NONE"NONE"
ENTRUST_SOFT_TOKEN"ENTRUST_SOFT_TOKEN"
GOOGLE_AUTHENTICATOR"GOOGLE_AUTHENTICATOR"

LockoutModeEnum

NameValue
AUTHENTICATOR"AUTHENTICATOR"
USER"USER"