Account inactivity lockout guidelines

This topic provides important information for users who manage Tracker accounts and user profiles. Companies and firms can't opt out of this security feature. However, companies can set a high value for user inactivity for company users.
The account inactivity lockout feature enhances Tracker security by automatically locking Tracker accounts for users who haven't signed in to Tracker for a defined number of days. This helps ensure that inactive (and possibly compromised) company and firm user accounts cannot be used to access Tracker.
Locked accounts can no longer be used to access Tracker unless manually verified and unlocked by a company or firm administrative user.

How it works

Company System Admins can set a time window for user inactivity in Settings > Security > Password and Sign-in Options > Account Inactivity Settings. If a company user hasn't signed in during that time, the company user’s Tracker account will be locked. The default company user inactivity setting is 90 days. However, it can be configured to be between 30 and 366 days.
Thomson Reuters sets the time window for firm user inactivity, across all firm users. The initial time window for firm user inactivity is 9,999 days, and will be progressively lowered until an optimal firm user inactivity window is determined.
Company and firm users who haven't signed in within the designated inactivity time window cannot sign in to Tracker until their account is manually reactivated. The administrative profile for a locked account will indicate that the user was locked out due to inactivity.
Locked accounts can only be reactivated by Tracker Coordinators (companies) and Lead System Administrators (firms).