Skip to main content

GeneralSettings

New general settings.

Properties

NameTypeDescriptionNotes
authentication_session_lifetimeintThe amount of time in seconds before an authenticated user needs to re-authenticate. Default is 900.[optional]
authenticator_activation_typestrA setting that indicates the type of token automatically created for the user when it is created. Choices are NONE, ENTRUST_SOFT_TOKEN or GOOGLE_AUTHENTICATOR. Default is ENTRUST_SOFT_TOKEN.[optional]
cors_enabledboolA flag that indicates if CORS is enabled for this account.[optional]
cors_originsList[CorsOrigin]A list of origins that cross-origin requests are allowed from.[optional]
default_gridboolA flag that indicates if a grid card is created for the user when it is created.[optional] [default to False]
default_mobile_smart_credentialboolA flag that indicates whether to automatically enroll a smart credential for the user when it is created. Default is false.[optional]
default_passwordboolA flag that indicates if a default password is created for the user when it is created. Default is true.[optional]
dynamic_linking_transaction_lifetimeintThe amount of time in seconds before a dynamic linking transaction expired. Default is 300.[optional]
enable_enhanced_authentication_detailsboolIndicates whether to enable Enhanced Authentication Details or not.[optional]
inactivity_grace_periodintThe amount of time in seconds that administrators can grant for users.[optional] [default to 3600]
lockout_countintThe number of failed authentications before a user is locked out. Default is 5.[optional]
lockout_lifetimeintThe amount of time in seconds before a user lockout expires. A value of 0 means the lockout never expires. Minimum is 0. Default is 0.[optional]
lockout_modestrThe lockout mode to use for your IntelliTrust account. The AUTHENTICATOR lockout mode means a per-authenticator lockout will be enforced. When a user locks an authenticator they can no longer use that authenticator but can still use an alternative authenticator to log in. The USER lockout mode will lock out a user if any of their authenticators have been locked.[optional]
manage_inactive_usersboolIndicates whether to block users who have not authenticated for a time being.[optional] [default to False]
max_fido_tokens_per_userintThe maximum number of FIDO tokens that a user can have. Default is 5.[optional]
max_grids_per_userintThe maximum number of grids that a user can have. Default is 5.[optional]
max_number_of_push_transactions_queuedintMaximum number of queued push transactions. Default is 1.[optional]
max_smart_credentials_per_userintThe maximum number of smart credentials that a user can have. Default is 3.[optional]
max_tokens_per_userintThe maximum number of tokens that a user can have. Default is 5.[optional]
push_authentication_lifetimeintThe amount of time in seconds before a push authentication requires expires if a response is not received from the mobile application. Default is 300.[optional]
push_transaction_lifetimeintThe amount of time in seconds that a push transaction can be queued. Default is 60.[optional]
registration_periodintThe user registration period in days. Default is 0. Deprecated: use the SelfServiceSettings registrationEnabled attribute.[optional]
show_onboarding_wizardboolIndicates whether the Get Started wizard should be shown or not.[optional]
smart_credential_defnstrThe UUID of the Smart Credential Definition to use when a user enrolls a Smart Credential.[optional]
user_inactivity_thresholdintThe amount of time in seconds for a user to be inactive.[optional] [default to 2592000]

Example