Managing general account settings

Refer to Controlling account 2FA settings in Two-factor authentication.

In the lower-right corner of the page, click Save.

With the Enable toggle turned on in this section, you can restrict access to the VSA 10 account to certain IP addresses or IP address ranges. You can turn the toggle off to disable IP address restrictions.

If IP address restrictions are enabled, a user whose current IP address is not included in the allowlist will be blocked from logging in.

NOTE  Selected teams and users can be configured to bypass IP restrictions. Refer to the next section, Bypass IP Restrictions.

To add an IP address or range of IP addresses to the allowlist for the VSA 10 account, complete the following steps:

1. Ensure the Enable toggle is turned on.
2. Click New.
3. Select either Single IP or IP Range to add either a single IP address or a range of IP addresses to the allowlist, respectively. If you enter a range, enter both the starting IP address and ending IP address in the range, and you will be informed if the range is not valid.
4. Select or clear the Web Application and Rest Api check boxes to specify if the entered IP address/range should have access to the VSA 10 web application for the account, the VSA 10 API for the account, both, or neither.
5. Click Save in the window to add the entry to the allowlist.
6. In the lower-right corner of the page, click Save.

To immediately remove an entry from the allowlist, click the Remove icon in the row. To edit the entry, click the Edit icon in the row.

Bypass IP Restrictions

With the Enable toggle turned on in this section, you can specify teams and users who are permitted to bypass IP restrictions. To learn about IP restrictions, refer to the preceding section, Whitelisted IP Addresses.

Only users who have their two-factor authentication settings configured are allowed to bypass IP restrictions. Refer to Setting up and executing user-level 2FA.

To specify any teams and users that should be permitted to bypass IP restrictions, complete the following steps:

1. Ensure the Enable toggle is turned on.
2. Click New.
3. All teams in the account are listed first, followed by all users in the account. Refer to Managing teams and users. Teams are denoted by a team icon while users are denoted by a user icon.
   
   Select or clear a check box to allow a team or user to bypass IP restrictions or to prevent a team or user from bypassing IP restrictions, respectively. The following circumstances will limit the options for selection:
   • A team will be grayed out and not available to select if it contains no members or if all of its members do not have two-factor authentication configured.
   • A team will be available to select if some but not all of its members have two-factor authentication configured, but the users in the team who do not have two-factor authentication configured will not be granted permission to bypass IP restrictions.
   • A user will be grayed out and not available to select if the user does not have two-factor authentication configured.
   
   To learn how these users can configure their two-factor authentication settings, which would allow them to be granted permission to bypass IP restrictions, refer to Setting up and executing user-level 2FA.
   
4. Click Save in the window to add any selected teams and users to the list of those that are permitted to bypass IP restrictions.
5. In the lower-right corner of the page, click Save.
   

This section allows you to enter the number of minutes (120 minutes or fewer) that users must be inactive in VSA 10 to be automatically logged out.

In the lower-right corner of the page, click Save.

The default minimum password requirements for VSA 10 are as follows:

• Must be at least eight characters long.

• Must contain at least one digit.

Using the available fields in this section, you have the option to enforce more complex password requirements, such as more characters, more digits, at least one uppercase letter, and a certain number of special characters (symbols). In the lower-right corner of the page, click Save.

The configured password requirements are displayed when users create or change passwords. An entered password will not be accepted until all requirements are met.

If users have already created passwords, and an administrator elevates the minimum password requirements in this section, any user whose password does not already meet the new requirements will be automatically prompted to change their password at their next login (following 2FA).

Upon entering a valid new password, the user will then be prompted to log in with their new password.

In the lower-right corner of the page, click Save.

Select your preferred VSA 10 email account setting: SMTP (Simple Mail Transfer Protocol) or OAuth (Open Authorization). Fill in the associated fields as required.

In the lower-right corner of the page, click Save.

For OAuth instructions, refer to OAuth 2.0 setup: Microsoft 365 with VSA 10.

NOTE  A default email server is not provided for SMTP configuration. One will have to be provided in order for it to function.

This section provides you the option to customize the email template for your account, such as adding your company logo, name, and custom links. To create a custom template, select the Use Custom Template check box. If this check box is not selected, a generic default template will be applied to emails sent from your account, and the Template HTML editor will not be editable.

Note the following requirements when adding custom code to the Template HTML editor:

• A footer announcement message must be added to the next section of the Email menu in order to be added to the email template. Refer to Footer HTML Announcement Message.
• The body of your custom HTML template must include the $TAG_BODY$ tag. When a notification is sent, the tag will be automatically replaced by the actual notification message.

EXAMPLE  <html> <body> <img src="http://your_company_image_url"> $TAG_BODY$ </body> </html>

In the lower-right corner of the page, click Save.