Authentication

The Default Role settings option allows us to define which role is assigned to new users.

Warning

It is recommended to set this to the lowest-privilege role that fits new users. Otherwise, new users may be able to change content or settings for other users in the DSW instance.

Note

A role configured as the default role for new users cannot be deleted.

Internal

For internal authentication, we can set:

• Registration - whether users can sign up on their own or not.

• Non-Admin Login - whether non-admin users can log in to the DSW instance or not.

• Two-Factor Authentication - whether users need to confirm their login with a one-time code sent to their email address or not.

• Session Expiration - how long the user session is valid before the user needs to log in again in hours.

• User Email Link Expiration - how long the email links (e.g., for password reset) are valid before they expire and cannot be used anymore in hours.

Note

In case we are using OpenID or creating user accounts manually, registrations should be disabled. It is recommended to also disable non-admin login.

For Two-Factor Authentication (2FA) we can also configure Code Length (how many character the code has) and Expiration period in seconds.