Configure User Lockout Settings

WebEOC Nexus lets you configure settings to lock a user out of their account.

Account Lockout

You can set the number of failed login attempts allowed before an account is locked. You can also set the amount of time that must pass before the user can attempt another login.

As the administrator, you can log in to WebEOC Nexus to manually unlock a user account.

The built-in WebEOC Nexus administrator account cannot be locked.

Inactivity Lockout

You can configure the number of days a WebEOC Nexus user account can be inactive before it is locked. If a user exceeds this number, they cannot log in.

If you use this option, you can automatically alert users who are about to exceed the inactivity lockout threshold. They will receive an email stating when their account will be locked and providing them with a link to log in to WebEOC Nexus.

Administrators can Lock and Unlock User Accounts.

To configure user lockout settings

1. Access the Admin View.

2. In the main menu, click the system settings icon . The System Settings page opens.

3. On the General tab, in the Security Options section, enter a number in the Account Lockout Threshold field. This sets the number of failed login attempts allowed before an account is locked.

   Set the threshold to zero (0) to allow an unlimited number of login attempts. However, Juvare recommends that you set this number to 3.

4. In the Account Lockout Duration field, enter the length of time that must elapse before the system allows another login attempt.

   Set the duration to zero (0) minutes to lock the account until it is manually unlocked by an administrator. However, Juvare recommends that you set the lockout duration to 30 minutes.

5. Enter a number in the Inactivity Lockout Threshold field.

   This sets the number of days an account can be inactive before it is locked. If a user exceeds the inactive time period, they cannot log in.

   If you do not want user accounts to be locked because of inactivity, leave this field blank, or set the duration to zero (0). User accounts then remain active until the administrator manually disables or deletes the account.

6. Select the Enable Inactivity Alert checkbox if users should receive an email stating that their account is about to be locked because the number of days the user has been inactive is about to pass the Inactivity Lockout Threshold described above.

   The email message tells the user that their account is about to become inactive and provides the number of days remaining until it is locked. It also includes a link to log in to WebEOC Nexus.

7. Enter a number in the Inactivity Alert Reminder Period box to set the number of days before an account is locked that the Inactivity Alert is sent.

8. Click Save.