In the "Authentication and password policies" section you can specify settings related to the parameters of built-in authentication:
- A prohibition on the user changing their own login or password;
- The minimum number of characters in the password;
- The password validity period;
- The password complexity level, which requires users to use more complex passwords that are significantly harder to guess;
- The lifetime of the cookie that contains the user session identifier. If the cookie lifetime expires, the user has to authenticate in the system again.
- The ability to create a user account automatically after successful authentication in LDAP or SSO. This simplifies administration: there is no need to import or enter manually in advance the allowed user accounts.