Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The Security settings in Service Automation Admin provide options for you to control user accounts and the use of passwords in the system. You can set the time period of the user’s inactivity after which the user will be disabled, decide how complex passwords must be when users create them, and specify what happens if a user forgets their password. An option for creating system messages on the login page is also set in Security.

Note

All security settings can be configured by Super Admins only.

You will see the following tabs:
  • Security Banner: Specify a message that will be displayed to all users when they access the login page.
  • Auto Lock-Out: Set your system to automatically lockout a user after a number of incorrect login attempts.
  • Password Complexity: Specify the minimum password length and the characters the password must contain to make it difficult for others to guess.
  • Mobile Logout Inactivity: Configure how long a user can be inactive in ServiceChannel Mobile before being logged out of the app.
  • Auto Disable: Automatically deactivate user accounts according to the configured time period of inactivity.
  • Password Aging: Set timeframes for repeated password usage.
Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Access Security Settings
  1. On the top-left of the page, click the menu  icon, and select Admin > Permissions > Security. The Security Banner tab appears.

    The page displays all security tabs


Security Options

The tabs below describe the security settings you can configure for your users.

Rw ui tabs macro

Rw tab
titleSecurity Banner

Displaying a Security Banner

When using a corporate branded site, you can specify a security message that displays to all users on the login page. This message is useful when alerting users on proper and improper usage of the ServiceChannel site.

Info
This option is not available to users who log in using the standard URL login.servicechannel.com.


Warning
titleImportant!
We do not recommend displaying password hints or other access messages in this security banner.


Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Display the Security Banner Message
  1. Click the Security Banner tab. (This tab opens by default after navigating to Admin > Permissions > Security.)
     Enabling the security banner
  2. Check the Display Security Banner on Login box.
  3. Enter the desired security message in the text field.
  4. Click Save. This message now appears when users log in using a corporate branded URL.




Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Remove the Security Banner Message
  1. Click the Security Banner tab. (This tab opens by default after navigating to Admin > Permissions > Security.)
     Removing the security banner
  2. Uncheck the Display Security Banner on Login box, and then click Save. The message no longer appears.

Rw tab
titleAuto Lock Out

Configuring Auto Lock Out

You can set your system to automatically lockout a user after a number of incorrect login attempts. This prevents users from attempting to guess a password by limiting the number of times they can input a password before being blocked from logging in. A message appears on the login screen when a user is locked out.

Auto locked out Service Automation login page


Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Configure Auto Lock Out
  1. Click the Auto Lock Out tab.
     Page to configure Auto Lock Out settings
  2. Set the number of Failed Login Attempts. Set to 0 for unlimited login attempts (user will not be locked out, even after entering the wrong password numerous times).
  3. Set the number of minutes or hours before a user account is automatically unlocked. After this time has elapsed, the user will be able to log in again with the correct password. Set to 0 to require a system administrator to manually unlock the account at all times. 
  4. Click Save.

Rw tab
titlePassword Complexity

Configuring Password Complexity

Enforcing users to create strong and complex passwords will help with keeping their accounts secure. This option allows you to specify the minimum password length and whether the passwords must contain characters that will make passwords difficult for unauthorized to guess. By default, all passwords must be at least six (6) characters in length and contain at least one letter and one number.

Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Configure Password Complexity
  1. On the top-left of the page, click the menu icon, and select Admin > Permissions > Security. The Security Banner tab appears.
  2. Click the Password Complexity tab.

    Setting password complexity for user accounts
  3. Select Complexity and check the options as needed:
    • Minimum Characters: Require all passwords to have, at minimum, the number of characters you specify here.
    • Require Letters: Passwords must include letters.
    • Require Lowercase Letters: After checking Require Letters, check this option so passwords must include at least 1 lowercase letter.
    • Require Uppercase Letters: After checking Require Letters, check this option so passwords must include at least 1 capitalized letter.
    • Require Numbers: Passwords must contain at least one number.
    • Require Special Characters: Passwords must contain at least one special character (@#$%^&*).
  4. Set the Retrieve Password option:
    • No: Users will have to contact their system administrator if their password is forgotten. The administrator will reset their password.
    • Yes: Users will be able to retrieve their forgotten password by entering their User ID or email address.
  5. Click Save.

Rw tab
titleMobile Logout Inactivity

Configuring Logout Inactivity for ServiceChannel Mobile Users

Administrators can configure how long a user can be inactive in ServiceChannel Mobile before being logged out of the app. With this setting, a user is logged out of the ServiceChannel Mobile app due to inactivity within the specified time period.


Note

For the ServiceChannel web application, the default system logout is 4 hours. This setting cannot be edited.


Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Configure Inactivity Timeframe
  1. In Admin > Permissions > Security, navigate to the Mobile Logout Inactivity tab.
  2. To set the time period of inactivity, pick either Minutes or Hours in the dropdown, and then enter a value in the input field.
  3. Click Save to confirm your changes.
    Configuring logout inactivity for ServiceChannel mobile users


Rw tab
titleAuto Disable

Configuring Auto Disable

You can set the system to automatically deactivate users who have not logged in to ServiceChannel within the specified time period. It will help to prevent possible security issues and avoid disabling accounts manually. You can notify them about their accounts being disabled, get notifications yourself when a user is disabled due to inactivity, and receive reports for all users who are scheduled to be disabled due to inactivity.


Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Configure Auto Disable
  1. Click the Auto Disable tab. 
  2. Configure the settings:
  • Disable User Account After. By default, the users who have been inactive for the past six months will be deactivated after the specified date. You can adjust the time period as needed.

    Panel
    bgColor#F9F9F9
    titleColor#0e3367
    titleBGColor#EAEAEA
    borderStylenone
    title⦿ How to Configure Disable User Account After
    Here, you can configure the time period of a user’s inactivity after which a user should be deactivated. It will be estimated according to the user’s last login attempt. The maximum timeframe you can set is:
    • 12 months
    • 52 weeks
    • 365 days



  • Disable User Warning Notification. By default, users will receive three warning emails: one month, two weeks, and one day prior to being disabled. You can adjust the time period for each of these alerts or disable them.

    Panel
    bgColor#F9F9F9
    titleColor#0e3367
    titleBGColor#EAEAEA
    borderStylenone
    title⦿ How to Configure Disable User Warning Notification
    Here, you can decide when inaсtive users must be alerted about the possibility of deactivating their accounts. You can schedule at least one and at most three warning notifications before the user’s account is disabled. The users will receive an email notification to the email address specified in their profile settings > General Info > Notifications Email. If you wish to disable any warning notifications, uncheck the Send email notifications to users... checkbox.

    Disable User Warning Notification setting



  • Disable User Notification. By default, the users with the Super Admin Role will be notified when the users are being deactivated. You can disable notification or change the recipients as needed.

    Panel
    bgColor#F9F9F9
    titleColor#0e3367
    titleBGColor#EAEAEA
    borderStylenone
    title⦿ How to Configure Disabled User Notification
    Here, you can specify the users who should receive email notifications each time someone’s account is disabled due to inactivity. 
    • In the Email Recipients field, enter one or several email addresses separated with a semicolon (;).
      (Optional) Leave the field empty for the user with the Super Admin Role to get the notification. 
    • Uncheck the Receive an email notification… checkbox if you wish to disable these notifications.

    Disabled User Notification setting



  • Upcoming Disabled User Report. By default, the users with the Super Admin Role will receive a monthly report for all users who are scheduled to be disabled within 45 days due to inactivity. You can choose to stop receiving these reports or set another time period.

    Panel
    bgColor#F9F9F9
    titleColor#0e3367
    titleBGColor#EAEAEA
    borderStylenone
    title⦿ How to Configure Upcoming Disabled User Report
    Here, you can configure the settings to receive a report via email for the users who are scheduled to be disabled due to inactivity. 
    • Select how often this report should be sent: monthly, bi-weekly, weekly
    • Set how many days, weeks, or months are left before the accounts are deactivated. The users who are scheduled to be disabled within this time period will be included in the report.
    • In the Email Recipients field, enter one or several email addresses separated with a semicolon (;).
      (Optional) Leave the field empty for the user with the Super Admin Role to get the notification. 
    • Uncheck the Receive a report via email… checkbox if you wish to disable these notifications.

    Configuration of the report for the users scheduled to be disabled


      3. Click Save.

Info
If you have user accounts both in ServiceChannel Automation and ServiceNow but never log in to SC, the auto disable settings will be applicable to your user profile in ServiceNow.



Rw tab
titlePassword Aging

Configuring Password Aging

Administrators can set timeframes for repeated Password usage. You can set up the following:

  • Minimum Password Age Policy determines the period of time that a password must be used
    before the user can change it.
  • Maximum Password Age Policy determines the period of time that a password can be used
    before the system requires the user to change it.
  • Enforce Password History Policy determines the number of unique new passwords that must
    be associated with a user account before an old password can be reused. 

Panel
bgColor#F9F9F9
titleColor#0e3367
titleBGColor#EAEAEA
borderStylenone
title⦿ How to Configure Password Aging
  1. From the navigation menu, select Admin > Permissions > Security. The Security Banner tab appears.
  2. Click the Password Aging tab.
  3. For each parameter, set the desired number of days (password age) or unique passwords (password history).
  4. Click Save.
    Page displaying the Password Aging settings



Live Search
spaceKeySCU
additionalpage excerpt
placeholderSearch Our Knowledge Base
typepage
labelsfm

Panel
titleColorwhite
titleBGColor#5fa7d0
borderStylegroove
titleIn this Article

Table of Contents
maxLevel3
minLevel2
indent20px

Panel
titleColorwhite
titleBGColor#75a346
titleRelated Articles

Filter by label (Content by label)
showLabelsfalse
max8
showSpacefalse
sorttitle
cqllabel in ( "serviceautomationadmin" , "permissions" ) and space = currentSpace ( )