A.1 Sign-in and registration with a company e-mail

What it does

• Sign in with a username or company e-mail; show / hide the password; Keep me signed in for 7 days on a trusted device.
• Self-registration only with an e-mail address on your company domain (e.g. @yourcompany.com); the account stays Pending approval until an administrator activates it.
• Strong password policy: at least 25 characters with upper case, lower case, digits and special characters; must not contain the name, e-mail, guessable words or sequences; the last 5 passwords cannot be reused. The checklist of rules is validated live while typing.
• Argon2id password hashing and brute-force protection: the IP address is blocked for 5 minutes after 5 failed attempts and the account is locked for 15 minutes after 10 failed attempts.
• Temporary passwords must be changed at the first sign-in.

How to use it

1. The user clicks Request one with the company e-mail and enters full name, position, e-mail and password.
2. The administrator opens System → Users, selects the permissions and clicks Approve & activate.