01What it is
Session time is the inactivity while signed in after which you are signed out. In automatic mode it is 30 minutes, and you can set your own time from 45 to 240 minutes in 15-minute steps.
The second sign-in factor is a code from an app on the phone, with no SMS and no email. When the company owner turns on the requirement for all accounts, anyone without a second factor gets past the password only to the setup screen. Whoever already has a code keeps it even when the requirement is off.
There are no backup codes, so turning on the requirement needs a second person with the Configuration: edit permission, who can remove the second factor on the Users screen if a phone is lost.
- AUTOMATIC SIGN-OUT
- 30 minutes or your own time up to 4 hours.
- A CODE FROM THE PHONE
- No SMS and no email.
- THE OWNER DECIDES
- Only the company owner turns on the requirement for all accounts.
02What it is for
A password is not enough
The second factor protects client data, quotes and floor plans even after a password leak.
The computer in the design office
A short session signs out a workstation someone has walked away from.
Trusted browser
A browser confirmed once does not ask for a code for 30 days.
03Main options
The screen has two parts: session time and the second sign-in factor.
When to sign out
The inactivity time for every account in the company.
- Automatic mode: 30 minutes
- Own time: from 45 to 240 minutes in 15-minute steps
A code from an app on the phone
Optional, or required on every account in the company.
- Only the company owner turns on the requirement for all accounts
- Turning it on needs a second person with the Configuration: edit permission
- Without the requirement anyone can turn on a second factor in My account
- Everyone else sees here only whether the requirement is on
04Tasks step by step
- STEP 1Make sure a second person has the Configuration: edit permission.
- STEP 2As the company owner open Settings › Session and security and tick Require a second factor on every account in the company.
- STEP 3Click Save the sign-in rule. Anyone without a second factor sets it up at their next sign-in.
- STEP 1In the Session mode field choose Own time.
- STEP 2Set the number of minutes from 45 to 240 and save.
- STEP 1A person with the Configuration: edit permission opens Settings › Users and removes the second factor from that account.
- STEP 2At the next sign-in the account holder sets up the second factor on the new phone.
05Actions
The most common security tasks.
Session time
Automatic sign-out after inactivity.
Require a second factor
A phone code for every account in the company.
Remove a second factor
Help with a lost phone, on the Users screen.
06What it connects to
Choose a module to see the related account settings.
My account
You turn on a second factor for your own account in My account.
Go to the topicMy accountUsers
Lost phone: a person with access to the Users screen removes the second factor.
Go to the topicUsersActivity log
Changes to the session time and the second factor rule go into the log.
Go to the topicActivity log