How to enable automatic unlocking of users and credentials in VIP Manager

Products

• VIP Service

Issue/Introduction

With the release of November 01, 2023, VIP Manager introduced a feature to automatically unlock credentials if the user attempts to authenticate again after a specified period. This article describes how to manage the automatic unlocking of VIP users or VIP credentials

Environment

VIP Service

Resolution

Log into your VIP Manager portal. Click the Policies tab and scroll down to User and Credential Lockout. 

Lockout Mode: Select whether VIP locks the user or credential when the user enters too many invalid security codes or user PINs. While in a locked state, the credential (if Credential is selected) cannot be used to authenticate. If User is selected, a locked user cannot be authenticated by any registered credential, including user PINs.

If you select User, configure the number of maximum invalid authentication attempts before the user is locked.
If you select Credential, VIP uses the Maximum Validation Failures configured in the Account > Credential Security Settings page for each credential type.

Important: A VIP administrator must unlock the user or credential manually (from the Users or Credentials page, as appropriate) unless auto-unlock is enabled.

Maximum validation failures: Set the number of invalid security codes or user PINs a user can enter before the user is locked. Once locked, the user cannot be authenticated by any registered credential, including user PINs. 

Enable auto-unlock: Enable auto-unlock to automatically unlock a user or a credential that has been locked due to entering too many invalid security codes or user PINs. When the time duration is reached, the user or credential will automatically unlock the next time the user attempts to authenticate. A VIP administrator can always manually unlock the user or credential before the time elapses.

Lock duration: Set how long (in minutes 1 to 99,999) that VIP waits before allowing the user or credential to become unlocked. The user or credential is automatically unlocked the next time the user attempts to authenticate after this time has elapsed.