Configure Security Settings

Active Directory

Domain Name for SSRS User

Enter the domain names (separated by comma) for accessing the SSRS reports for Azure Active Directory users.

This field must be empty for Active Directory (on-premises) users to access the SSRS reports.

Mobile Operator

Authentication Mode

Specifies the authentication mode of a user. For example, if the user is set to Hybrid mode via the AVEVA Mobile Operator web application, then this box displays the value as Hybrid.

This option allows you to only view the authentication mode of a user. To change the authentication mode, see Set the authentication mode .

Mobile Operator

Authentication Password Timeout (Hours)

The amount of time after a successful login that a user can continue working in the application without contacting the server (in "offline mode"). Once this period of time has elapsed, the user is required to login again. A value of 0, will disable "offline mode" logins for accounts.

Note: The "Persist Authentication Password" setting must be enabled to use this option.

Mobile Operator

End of Shift Auto Logoff Enabled

Enables or disables the Auto Logoff feature for AVEVA Mobile Operator. Check the box to enable.

Auto Logoff allows a user to be automatically logged off from the mobile app at the end of a shift. When the scheduled end of shift occurs, a pop-up notification will appear. If the user does not interact with the notification, the user will be logged off after a brief period of time. If the user wishes to continue the shift, they may dismiss the notification to proceed with the current shift.

If a task with condition and action is in progress, AVEVA Mobile Operator will save the active task value, validate, and then fire the action for matching conditions before returning the user to the login screen. When the user logs in again, the procedure task will show that the trigger has been fired.

By default, this option is disabled.

Mobile Operator

Device License Timeout

The device license remains active depending upon the time specified (in minutes).

If you do not provide any value or set the value to zero (0), the device license will never expire. In this case, the device license is released only when the user manually logs out of the mobile app while connected.

If you want to enable automatic release of the device license after a specific time interval, then specify the required time (in minutes).

Mobile Operator

End of Shift Auto Logoff Time (Minutes)

Specifies the period of time that must elapse after an Auto Logoff notification before AVEVA Mobile Operator logs the current user off. This option supports a range of 1 to 720 minutes.

Note that a validation error will occur in any of the following cases:

• No value is provided for this option while End of Shift Logoff Enabled is checked.

• A negative value is provided.

• A value greater than 720 is provided.

  The default value for this option is 5 minutes.

Mobile Operator

Persist Authentication Password

Enables a user, following a successful login, to login in without contacting the server for the amount of time specified in the Authentication Password Timeout (Hours) setting.

Mobile Operator

Sync Reminder Duration (Minutes)

Enter a time when you should be reminded to perform a sync operation in the mobile app. By default, the sync reminders are disabled. Configuring a value greater than 0 in this field, enables the sync reminder setting in the mobile app for that Plant.

For more information, see Set the time for Sync Reminder.

Password Management

Show Change Password Link In Management Center

If checked, the "Change Password" option in the Management Center appears.

Password Management

Maximum Failed Login Attempts

The number of failed login attempts allowed before the account is locked. To have a strong password,the default value is set to 10, indicating that only 10 login attempts will be provided. You can provide a value between 0 and 255. A value as zero (0), indicates that there is no limit specified for login attempts.

Password Management

Password - Change Required After (Days)

The number of days a password is valid before it expires (and users are required to change it). The default value zero (0) indicates that passwords will not expire. The value entered must be within 0 and 365.

Password Management

Password - Change Warning Before (Days)

The number of days before a forced password change (if set - see Password - Change Required After (Days)) that the user is notified about it. The default value for this option is set to zero (0).

Password Management

Password - Minimum Characters Required

The minimum number of characters required in a password. An error message is generated with this option enabled if a password change is attempted using fewer characters than specified in this setting. To have a strong password, the default value is set to eight (8), and the maximum password value is 15. Blank passwords are not allowed.

Password Management

Password - At Least 1 Letter Required

If checked, user passwords must contain at least one letter. An error message is generated with this option enabled if the user attempts to set a password that does not contain at least one character from the L (Letter) Unicode category, including any of its sub-categories: Lu (Letter, Uppercase), Ll (Letter, Lowercase), Lt (Letter, Titlecase), Lm (Letter, Modifier), or Lo (Letter, Other). To have a strong password, this option is checked by default.

Password Management

Password - Lowercase Character Required

If checked, user passwords must contain at least one lowercase letter of the alphabet. An error message is generated with this option enabled if the user attempts to set a password that does not contain at least one lowercase letter. To have a strong password, this option is checked by default.

Password Management

Password - Numeric Character Required

If checked, user passwords must contain at least one number. An error message is generated with this option enabled if the user attempts to set a password that does not contain at least one character from the N (Number) Unicode category, including any of its sub-categories: Nd (Number, Decimal Digit), Nl (Number, Letter), or No (Number, Other). To have a strong password, this option is checked by default.

Password Management

Password - Special Character Required1

If checked, user passwords must contain at least one special character. An error message is generated with this option enabled if the user attempts to set a password that does not contain at least one special character. To have a strong password, this option is checked by default.

Password Management

Password - Uppercase Character Required

If checked, user passwords must contain at least one uppercase letter of the alphabet. An error message is generated with this option enabled if the user attempts to set a password that does not contain at least one uppercase letter. To have a strong password, this option is checked by default.

Password Management

Password History (Store Last)

The number of user password modifications stored. An error message is generated with this option set to greater than zero if the user attempts to set a password to one of the stored passwords. The default value is set to three (3), indicating that the last three passwords will be stored in the database. The value entered must be between 0 and 10.