• Application Preferences Configuration
  • Login
  • Password Recovery
  • Password Validation

#Application Preferences Configuration

The preferences section contains configurations for tweaking every single component in your login page including Login, Password Recovery, and Password Validation.

#Login

Default Login Method: When you have multiple authenticators, select which method should be the default.

Authenticators: Enable or Disable which method(s) users can use to login to your system: Username vs Email vs Phone. For each authenticator you can choose Password, OTP or a combination of both (Password + OTP) or Disabled. If the selected Default Login Method is not among the enabled authenticators, the first enabled authenticators will be considered instead.

#Password Recovery

Methods: Enable/Disable which method(s) users can use to recover their passwords.

Default: The default password recovery method (Username vs Email vs Phone).

#Password Validation

SSOfy has an optional password validation layer to help avoid requests to the resource server when invalid credentials are submitted, as well as to increase the security of user logins. The same password validation rules will be also applied to the Password Reset process (if enabled).

Another advantage of using SSOfy's password validator is that users will always receive accurate translated error messages depending on the following configuration options:

• Minimum Length of password
• Maximum Length of password
• Accept lowercase characters
• Accept uppercase characters
• Accept numbers
• Accept symbols
• Accept whitespaces
• Require at least one character: Having at least one character is a mandatory requirement when entering password.
• Require at least one lowercase character: Having at least one lowercase character is a mandatory requirement when entering password.
• Require at least one uppercase character: Having at least one uppercase character is a mandatory requirement when entering password.
• Require at least one number: Having at least one number is a mandatory requirement when entering password.
• Require at least one symbol: Having at least one symbol is a mandatory requirement when entering password.