Account Settings
Menu Path: Settings > Account
Table of Contents
- Setting Account Deactivation Period
- Password Rule Settings
- Bulk Change of All User Passwords (On-Premise Only)
- Session Automatic Logout Settings
- Recent Access Information
- Account Authentication Policy Settings
- Automatic Cleanup and Deactivation of Conditional Policy Members
- Unused Account Automatic Deactivation Policy
Setting Account Deactivation Period
If a user does not log in for the set period, the account will be automatically deactivated.
- Deactivated accounts are
사용자 관리You can reactivate it from the menu.
Password Rule Settings
Users added through external account integration such as Microsoft and SAML are not subject to password rules.
| item | Description |
|---|---|
| Password Rule Settings | Set the required characters and minimum length for password creation and changes. |
| Setting Password Change Frequency | Set the frequency for changing the password. |
| Password Reuse Restriction | It restricts the reuse of the last N passwords. |
| Password Change Extension Settings | Set the number of times and the extension period that can be extended without changing the password. |
| URL to navigate when changing password | Set the URL to redirect to after the password change is complete. |
| Setting User Initial Password | This is the initial password automatically issued to the user during manual registration (individual registration, CSV bulk registration). The user must change this password to a new one after the first login. |
**Reference (Example of Password Reuse Restrictions):**If set to 2, the last 2 passwords used cannot be reused.
Bulk Change of All User Passwords
**This is an On-Premise exclusive feature.**In a cloud (SaaS) environment,
[비밀번호 일괄 변경]The button is not displayed.
Registered in the tenantReset all users' Security365 internal passwords at onceis a feature. In the password policy settings section사용자 초기 비밀번호Under the item[비밀번호 일괄 변경]You will enter with a button.
The requester's own account is always excluded. For accounts synchronized with external systems such as SCI Server, Microsoft, etc.Only internal password for Security365It will be initialized, and the password of the external system will not be changed.
Comparison with the existing password reset feature
| Division | Email Initialization | Temporary Password Generation | Full Batch Initialization |
|---|---|---|---|
| Location | User List > Action Button | User List > Action Button | Settings > Password Policy Settings |
| Target | Selected Multiple Users | Single User | Entire Tenant |
| Initialization Method | Send reset link via email | Temporary password generation and delivery | Bulk set with the specified password |
| Processing Method | Motivation | Motivation | Asynchronous |
| Application Environment | Cloud / On-Premises | Cloud / On-Premises | On-Premise Only |
Input fields
[비밀번호 일괄 변경]A popup will be displayed when the button is clicked.
| item | Required | default value | Description |
|---|---|---|---|
| Change Password | ✅ | - | Guidelines for password rule settings will be displayed. |
| Password Confirmation | ✅ | - | 변경할 비밀번호You must enter it the same way. |
| Excluding Administrator (ADMIN) | ❌ | Checked | Checking excludes ADMIN role users from the target for changes. |
| Password change required on next login. | ❌ | Checked | When checked, the user is forced to change to a new password after the first login. |
Processing Action
[초기화]The request is immediately received when the button is clicked, and the popup closes.- The actual password change is processed **in the background (asynchronously)**, and for large tenants, it may take several minutes to complete.
- When an error occurs, the popup remains displayed and the error message is shown.
Exclusion Target
| condition | Action |
|---|---|
| Your Account | always exclude |
| ADMIN Role | 관리자(ADMIN) 제외Exclude on check (default: checked) |
Session Automatic Logout Settings
It is set to automatically log out after a certain period of inactivity or if simultaneous access occurs. Individual settings are possible for each service, and it applies to the management center / SHIELD Drive / SHIELD Gate.
Unused Automatic Logout
If no mouse or keyboard input is detected for the set period of time, you will be automatically logged out of the service.
Default Logout Time Option
| time | Note |
|---|---|
| 10 minutes | default value |
| 30 minutes | - |
| 1 hour ~ 12 hours | 1 hour unit |
기본 로그아웃 시간Selecting a time from the dropdown will apply it uniformly to all services.- You can individually change the logout time through the dropdown in each service row.
- You can individually set the activation status of unused automatic logout using the toggle for each service row.
- Only the services you are currently subscribed to (Management Center, SHIELD Drive, SHIELD Gate) are displayed.
Automatic Logout on Concurrent Access
If a new connection occurs from a different IP with the same account, the existing connection session will be automatically terminated.
- You can individually set the activation status of automatic logout for simultaneous connections using the toggle for each service row.
- Only the currently subscribed services (Management Center, SHIELD Drive, SHIELD Gate) are displayed.
Recent Access Information
You can configure the management center to display the date and time of the user's last access and the IP address when logging in.
Account Authentication Policy Settings
Set a policy to temporarily lock accounts when user authentication fails. When the configured number of failures is reached, the account is automatically locked and will be automatically released after a specified time.
| item | Options |
|---|---|
| Number of authentication failures | 5 times / 10 times / 15 times |
| Account Lockout Duration | 5 minutes / 10 minutes / 30 minutes / 60 minutes |
- A locked account will be restricted from logging in until the set time, even if the correct password is entered.
**Reference:**Applies only to manual login users who do not use SSO (Single Sign-On).
Automatic Cleanup and Deactivation of Conditional Policy Members
When a user moves to a different group, the conditional policies that include that user as a member are automatically synchronized. Depending on the group move, the policy members may change, or the policy may be automatically disabled, andIndividual settings by serviceThis is possible.
Disqualification Criteria
from the existing grouponly in case of departureIt will be automatically disabled.
| Group Before Change | Group After Change | Departure Status | Policy Action |
|---|---|---|---|
| A | B | escape | Deactivation Target |
| A | A, B | No deviation (only addition occurs) | maintenance |
| A, B | A | Departure (Departure from B) | Deactivation Target |
| A | (None) | Exit (Exit from all groups) | Deactivation Target |
Applicable Services
You can individually set the automatic synchronization usage for each service toggle.
| Service | default value |
|---|---|
| Security365 | Not in use |
| SHIELD Gate | Not in use |
| SHIELD Drive | Not in use |
| SHIELD DRM | Not in use |
| SHIELD Mail | Not in use |
| SDF | Not in use |
**Reference:**The list of services displayed varies depending on the services you are currently subscribed to.
Scope
This policy applies equally to group changes for all paths below.
- Manual Editing in the Management Center
- SCI Server Synchronization
- CSV Synchronization (Bulk Registration)
- Microsoft 365 Synchronization
- SAML SP Integration
Caution
- The conditional policies of services with toggles disabled are not affected when moving groups.
- Even if you change the toggle of a specific service back to disabled,**Previously automatically disabled conditional policies are not restored.**if necessary
조건 항목 > 조건부 정책 구성원must be activated directly in. - If changes exceed 500 people at once, the automatic synchronization process will be carried out in parts, so it may take time to reflect.
Unused Account Automatic Deactivation Policy
This is a policy that automatically deactivates user accounts that have not been accessed for a certain period. Automatic deactivation is performed daily based on the set period. Admin accounts are excluded from this process.
| item | Description |
|---|---|
| Automatic Deactivation of Inactive Accounts | Use / Unused Selection (Default: Unused) |
| Deactivation Criteria Period | Days elapsed since last access (default: 90 days, enter an integer of 1 or more) |
미사용The duration input field will be disabled when selected.저장The setting values will be applied when clicked.