Defining security policies

To define security policies for user authentication and session management, use the Security Policies tab.

You must have the pzViewAuthPoliciesLP privilege to view the Security Policies tab. This privilege is part of the PegaRULES:SecurityAdministrator role.

Access this tab from the Dev Studio header by clicking Configure System Settings Security Policies .

• Select Enable frequently required policies to enable and configure password settings, CAPTCHA functionality, lockout settings, and logging levels for auditing logins.

• Enable and configure two-factor authentication.
• Enable and configure automatic disablement of inactive operators.
• Click Display Audit Log to display audit logs related to login attempts.
• Click View History to see a report of changes to security settings, including the date, the operator who made the change, and what change was made.

• Managing security policies

  Enable security policies for user authentication and session management to improve application security. You can control the strength of user IDs and passwords, manage session time-outs and the disabling of operator IDs, control the auditing of login events, and implement CAPTCHA and multifactor authentication.

• Displaying the Security Audit Log

  Display the audit log to view login attempts and other security events.

• Configure system settings from Dev Studio

  To configure your system, use the Dev Studio Configure System Settings menu.