​

Login Configuration

Login Configuration protects your instance against repeated failed sign-in attempts and controls how long a signed-in session stays valid. Use it to decide:

• How many wrong passwords an account tolerates before it’s temporarily locked out
• How long that lockout lasts
• How often a signed-in user is asked to sign in again

Getting this right matters for security (too lenient invites brute-force attempts) and for user experience (too strict logs people out constantly). Purpose and Benefits

• Purpose: Set the failed-login lockout threshold and JWT session expiry.
• Benefits: Protects against brute-force login attempts while controlling how often users are asked to sign back in.

​

How to Configure

To configure Login Configuration, follow the steps below:

1. Click the Profile icon and navigate to Settings > Preferences > Login Configuration.
2. Click Edit.
3. Set the following fields:
   • Max Login Fail Attempts: Number of consecutive failed login attempts allowed before the account is temporarily blocked. Default: 3.
   • Access Block Time: How long, in seconds, an account stays blocked after exceeding the max failed attempts. Default: 600.
   • JWT Token Expiry Time: How long, in seconds, a login session token remains valid before the user must sign in again. Default: 3600.
   
4. Click Save.