Set up account lockout policy
Administrators set up the organization's lockout policies and set the maximum number of tries before the application locks a person out.
- Sign in to ONESOURCE Administration.
- SelectSetup, thenAccount Lockout Policy.
- Select from the following options:
- Maximum password tries:The person can try to enter their password between 2 to 10 times before the system locks them out, as configured on this page.
- Lockout duration (in minutes):The system locks out the person for 1 to 1,440 minutes before automatically unlocking the account.
- If the system doesn't have a specified duration for the lockout, they'll need to contact the administrator to unlock their account. (This is a regulatory requirement for SOX compliance tax apps.)
- User inactivity (in days):A person can be inactive 1 to 400 days before having their account inactivated automatically.
Session timeout due to inactivity
The system automatically signs you out after 30 minutes of inactivity to help protect sensitive information and maintain session security.