These are system-wide Membership (Login and User Security) settings and can be accessed by your Vuture Administrator at "Admin.System.Membership":

 

Setting	Default	Description
Maximum Login Attempts	5	After this number of unsuccessful login attempts the user will be locked out.
User Inactivity Expiry	0	If the user hasn't accessed the system for this number of days, they will be disabled
Password Expiry	45	Number of days after which the password will expire.   Password expiry check is done for subsequent logins after the user logs in for the first time, or a reset
Password History	3	A user will not be able to set his password to the one that he has already used in his last n changes. This value indicates n. Eg: If n=3, then he will not be able to set the password to the one that he has used in his last 3 changes.
Password Policy	1110	1st - At least one lowercase letter;2nd - At least one uppercase letter;3rd - At least one numeric;4th - At least one punctuation
Check Password History	false	Check password history?
Minimum Password Length	7	Minimum password length when changing/updating the password.
Change FirstTime Password	true	Change first time password on login?
Authentication Method	VX	Authentication method for the instance
Authentication Excluded Domains		When logging in via AD, a comma separated list of domains that use Vx authentication instead.
External Id		Do the logins link to an external id - Default is blank in which case this is not displayed in user edit.
Send Confirmation Email	true	Send confirmation email when the password is updated?
Email New User Login Details	true	Send an email when a user is created?
First Password Expiry Days	1000	After this number of days the first password will expire.
Check First Password Expiry	false	If CheckFirstPasswordExpiry is checked then we check for First Password Expiry Days. This will be done when the user logs in for the first time after reset or creation.
Check Password Filter	false	When user updates his password, check if the password is on a restricted list.
Login Auto Complete	on	When this setting is on, the login page text box remembers the previously typed values.
Display External Systems	false	Display 3rd party systems
LDAP Url		LDAP Url
LDAP Username		LDAP Username
LDAP Password		LDAP Password
LDAP Group		LDAP Group to check
LDAP Domain Exceptions		Comma separated list of domain names for which normal authentication will be performed
Show contact ID	false	Used for alumni microsites, etc.
LDAP Server Name		LDAP server name
LDAP Domain Name		LDAP Domain name
LDAP Search DN		LDAP Search DN
LDAP Type	LDAP	LDAP or LDAPS (LDAP SSL)
Custom Login Exception Message	The Username/Password combination you entered is not valid. You have {x} attempts remaining	This is the standard login error message.
Custom Login Exception Final Message	The Username/Password combination you entered is not valid. You have {x} attempt remaining.Click on 'Request Username and Password’ to prevent a locked account	This is the final login error message that a user will see before locking the account.
Custom Login Exception Max Login Exceed Message	Your account is now locked. Click on 'Request Username and Password' to reset your Password.	This login error message will be displayed when users lock their account.
Custom Login Exception No Username Message	No Username/email provided.	This is the login error message that a user will receive when no username is provided.
Decrement Login Attempts	false	Enables a security where forgotten password link decrements the login attempts
Can Access WebApi Via User Auth Token	false	Enable access to Web API via a User Auth Token
Use Spacelab Login For All Users	false	Use the Spacelab login page for all system users
Custom message for disabled user account	User account is disabled	This is the default message.  If you edit this message it will be used for all users locked out of your instance

FAQ

Q. If we changed the minimum password length to 10 characters for Vuture, would those users who have a shorter password have to immediately reset theirs? Or does the rule kick in when it is each user's time to reset?

A. They would not have to change their password immediately.  The new rule will only take effect the next time a password reset happens.  This is because Vuture only stores a hashed version of the passwords so cannot tell what the password is.