General Settings

This tab sets General Settings for an organization.

Lockout Threshold (attempt) - Determines how many failures are allowed before a user is prevented from logging into this organization in Password Server. A value of 0 means that the Password Server should never lockout a user. A typical value of 5 attempts allows a user to recover for an input error while preventing an attacker from probing the server in too much depth.
Lockout Duration (minutes) - Determines how many minutes a user is locked out before the user can log into this organization again in Password Server. A value of 0 means that Password Server should never unlock the user, requiring an administrator to unlock the user manually. A typical value of 15 minutes allows a user to recover from a failure while preventing an attacker from probing the server in too much depth.
Base URL - Defines the first part of the domain URL path string sent in server email messages. You can use internal domain names if the emails are expected to be within the local network only. If you expect emails to be also sent externally, you should provide a fully qualified domain name. Internal example: yourdomain.local. External example: yourdomain.com.
Allow the use of Private Vaults - If checked, users in this organization can be assigned the Allowed to maintain a private vault permission. Users that already have private vaults assigned will lose access to them if this setting is unset. Losing access to private vaults does not delete the passwords in these private vaults. Users will regain access to their private vaults when this permission is re-enabled.
Allow Vault members who can Read to export content to CSV (in clear text) - If checked, users with the Read permission are allowed to export the contents of the vault into a clear-text CSV file. Even if checked, users with Requires Approval Assigned cannot export vaults.
Allow previous password history to be shown - If checked and a vault is configured to keep a password history, users with the Modify permission can see a list of previous passwords when they view a password history. If this option is turned off, a password history is still kept as per the vault settings. Users just aren't able to see it.