Page History

Configuring Policies

On Security → Policies, there are three main configuration columns that can be important for CFR 11 compliance.

• Identification

• Esign

• Session

Pre-defined Policies

The platform comes with a few predefined policies that you can use, or you can create your own.

• Default

• Enhanced

• Critical

Security → Tutorial | Concept | How-to Guide |  Standards Compliance | Reference

Pre-Defined Policies

Three standard policies are configured:

Configuration Properties

Identification Settings

Password and account management rules:

Password Requirements

Account Security

E-Signature Settings

Electronic signature requirements for critical actions:

Configuring E-Signature

1. Enable in policy settings
2. Set timeout (e.g., 60 minutes)
3. Assign policy to users
4. Enable on controls requiring signature

Example:

csharp

// Check if e-signature required
if (@Security.Policy.ESign.Enabled)
{
    // Prompt for password
    if (!@Security.ValidateESignature())
    {
        return; // Action cancelled
    }
}

Session Management

Automatic logoff configuration:

AutoLogOff Modes

Applying Policies

Assign to Users

1. Navigate to Security → Users
2. Select user row
3. Set Policy column
4. User inherits all policy settings

Runtime Behavior

csharp

// Get current user's policy
string policyName = @Security.CurrentUser.Policy;

// Check policy settings
var policy = @Security.Policies[policyName];
bool requiresESign = policy.ESign.Enabled;
int passwordMinLength = policy.Identification.PasswordMinLength;

Compliance Scenarios

FDA 21 CFR Part 11

Policy: Critical
Identification:
  - PasswordMinLength: 8
  - PasswordHistory: 5
  - MaxPasswordAge: 2160 (90 days)
  - BlockOnInvalidAttempts: 3
ESign:
  - Enabled: True
  - TimeoutMinutes: 30
Session:
  - AutoLogOff: Both
  - InactivityMinutes: 15
  - DurationHours: 12

High Security Environment

Policy: Enhanced
Identification:
  - PasswordMinLength: 12
  - AllowShareUser: False
  - BlockOnInvalidAttempts: 5
  - BlockAging: 24
Session:
  - AutoLogOff: Inactivity
  - InactivityMinutes: 10

Best Practices

1. Start with pre-defined - Modify existing policies
2. Document requirements - Clear compliance needs
3. Test thoroughly - Verify all settings work
4. Train users - Explain policy changes
5. Regular reviews - Update as needed
6. Gradual implementation - Phase in restrictions
7. Monitor compliance - Track violations

Troubleshooting

Account locked:

• Check BlockOnInvalidAttempts
• Verify BlockAging timeout
• Administrator unlock required
• Review failed login attempts

Password rejected:

• Check PasswordMinLength
• Verify against PasswordHistory
• Confirm MinPasswordAge not violated
• Review complexity requirements

Unexpected logoff:

• Check Session settings
• Verify InactivityMinutes
• Review DurationHours
• Check client activity detection

E-signature issues:

• Verify policy enabled
• Check timeout not expired
• Confirm user has password
• Test signature validation

In this section...

In this page:

Security Policies Properties Overview

Identification Properties

Contains several password configuration options, detailed below:

Image Removed

Esign properties

When enabled, a password will be requested for Action Dynamics with eSign. The password remains valid for a specified timeout time (in minutes).

Image Removed

Session properties

User can be logged off according to a determined Inactivity Time (in minutes) and/or after a maximum session duration (in hours).

Image Removed

Security Session Properties

Property

Description

AutoLogOff

• None

• Inactivity

• Duration

• Both

InactivityMinutes

Inactivity Time (in minutes).

DurationHours

Inactivity Time after a maximum session duration (in hours).

To apply a created session configuration to a User, go to Security → Users (Policies Columns), and select the desired option.

Properties Reference

The Properties References present a reference that describes and explains the properties for Security Policies. The table lists all properties available for the configuration item. However, not all properties described in the documentation are displayed in the data grids by default. Right-click column headers to see which property columns are currently displaying. The displayed properties appear with a check mark.

The data grids allow users to manage and organize information by showing or hiding properties in tables within configuration interfaces. Users can view and select properties via column headers, enable multiple selections, add or remove columns, or reset grid settings. These features are available in all configuration interfaces using a table for data management. To turn on or off showing a property on the data grid, right-click column headers to select properties or use the reset button to return to default settings. Check out Working with DataGrids for detailed info.

Security Policies

In this section: