Manage Security Parameters

Security parameters are firm settings for user passwords and timeouts, managed by a Broker Admin.

Manage Password Settings

1. Log on to BenefitPoint as a Broker Admin user.
2. On the top navigation bar, click Brokerage Info.
3. On the Brokerage Firm Information page, scroll down to the Firm Security section.
4. Enter the following information based on your firm's security protocols:
   1. Inactivate passwords and prompt changes every, select the number days. This will to require users to change passwords at regular intervals select the number of days.
   2. Inactivate user accounts due to inactivity after, select the number of days. This will inactivate user accounts due to inactivity.
   3. Passwords must not be reused within the last, select the number of times. This will prevent users from using the same password repeatedly.
   4. If required, select Password must not contain the first or last name.
   5. If required, select Password must not contain the word 'password'.
   6. If required, select Password must not contain more than two identical consecutive characters.
   7. If required, select Do not allow more than one self-managed password reset within 24 hours.

Manage User Inactivity Timeout Period

1. Log on to BenefitPoint as a Broker Admin user.
2. On the top navigation bar, click Brokerage Info.
3. On the Brokerage Firm Information page the Internet Protocol Restrictions is used to specify when a user session should timeout after inactivity.

The maximum time allowed for inactivity is 120 minutes.

Make Passwords Non-expiring for Web Services User

Add Web Services Access Only to the Broker role. This access will allow the password to be non-expiring.

The following are Broker Admin steps for changing access:

1. Log on to BenefitPoint as a Broker Admin.
2. On the top navigation bar click Users. A list of all users appear.
   Locate the user you want.
3. From the Action drop-down list and select Edit User. The Edit User page appears.
4. In the Role section, expand the Broker role.
5. Scroll down to the bottom and add a check mark from Web Service Access Only.
6. Click Save.