System Security

Sandata Aggregator has many system security features, including:

1. Automatic Logout - Users are automatically logged out of the system after a period of inactivity. When users remain idle for 15 minutes (default value) a warning message displays. For accessibility reasons, users have 2 additional minutes to respond to the prompt and extend the session.

2. Password Rules - Sandata Aggregator has several rules to ensure passwords are secure. Passwords must:

A. Include an upper and lowercase character.

B. Include at least one special characters (For example: !@#$&).

C. Not include any part of the username.

D. Not include more than two consecutive characters from the user’s full name.

E. Not include more than two consecutive characters from the account’s name.

F. Be at least twelve characters in length.

3. Automatic Password Expiration - Passwords expire after a configurable number of days. Beginning 10 days before password expiration, after logging in, users are redirected to the Change Password screen, where they can change their password or skip the password change process and continue into the application. This occurs each day until the password is updated. If a user logs in with an expired password, the Change Password screen displays and the password must be updated before the user can log into the system.

4. Multi-Factor Authentication - When enabled, users must provide an additional passcode from their mobile device or email as part of the login process.

• AGG Manual.5.log-269538.zip7 KB