# Back Office Portal - Security Settings

In the Security Settings tab, brokers can configure important security features for the CRM Back Office Portal. These include:

1. [**Remote Login Prompts**](#setting-up-security-settings)**:** By enabling remote login prompts in the Security Settings tab, brokers can enhance the security of the CRM Back Office Portal. This feature alerts users whenever their account is accessed from a different IP address than usual. It serves as a proactive measure to notify users of potential unauthorized access to their account. Prompting users with these alerts allows them to take immediate action if they suspect any suspicious activity and helps ensure the safety of their account.
2. [**Password Strength Settings**](#setting-up-security-settings)**:** In the Security Settings tab, brokers can configure the password strength requirements for their users. This feature allows brokers to define specific criteria for creating strong passwords. By implementing strong password policies, brokers enhance the overall security of back office user accounts, making them less susceptible to password-related breaches or unauthorized access attempts.
3. [**Mandatory Two-Factor Authentication (2FA) Settings**](#setting-up-mandatory-2fa-verification): Brokers can decide whether to activate 2FA for all CRM Back Office users for enhanced account protection. By default, this function is disabled. Once enabled, users will be prompted to input a 2FA code when logging into the CRM Back Office. This extra layer of security helps protect accounts from unauthorized access by requiring a second form of verification.
4.  **Failed Login Attempt Limit**: Brokers can define the limits on failed login attempts, which will trigger automatic account suspension after repeated failures to mitigate security risks. \


    <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FU6l3uAaTf1sJdNRjH41A%2Fimage.png?alt=media&#x26;token=0cfdd5c9-4549-44c7-9b25-6985e223c677" alt=""><figcaption></figcaption></figure>

### <mark style="color:red;">Setting Up Security Settings</mark>

1. To setup Remote Login Prompts, follow the steps as mentioned in [remote-login-prompts](client-portal-security-settings/remote-login-prompts "mention").&#x20;
2. To setup Password Strength Settings, follow the steps as mentioned in [password-strength-settings](client-portal-security-settings/password-strength-settings "mention").&#x20;
3. To setup Failed Login Attempt Limit, follow the steps as mentioned in [failed-login-attempt-limit](client-portal-security-settings/failed-login-attempt-limit "mention")

### <mark style="color:red;">Application of Password Strength Settings</mark>

1. When you are creating a new back office user account, you are required to adhere to the password strength settings that have been selected.
2. If a user's password does not meet the specified requirements, an error notice will be displayed, informing you of the password requirements that were not met. \
   ![](https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FEPtoElwWqo2iMVgeVdGZ%2Fimage.png?alt=media\&token=3b1d0f20-f80c-482c-80db-ce7fb38c71d7)
3. When back office users update their account password, they are required to follow the password security settings as well. \
   ![](https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2F7E70KqBd3jiJNXtmkUWW%2Fimage.png?alt=media\&token=07c3351f-0631-46cb-9baa-808c9932170d)

\


### <mark style="color:red;">Setting Up Mandatory 2FA Verification</mark>

To set up Mandatory 2FA Verification, follow these steps:

{% tabs %}
{% tab title="Step 1" %}
1. Navigate to Security Settings.&#x20;
2.  Click the "Edit" icon. \


    <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FCN8aJlSaINsWQ8cLdcXq%2Fimage.png?alt=media&#x26;token=49304c00-bd86-4725-8059-f100a1995ef8" alt=""><figcaption></figcaption></figure>
{% endtab %}

{% tab title="Step 2" %}
1. Enable "Mandatory Two-Factor Authentication".
2.  Click "Save". \


    <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FTQA3Og1p8FbpgLJ2eWX4%2Fimage.png?alt=media&#x26;token=a231731d-2b79-46b3-8424-69faa38a42e6" alt=""><figcaption></figcaption></figure>


{% endtab %}
{% endtabs %}

### <mark style="color:red;">Application: Users Without Existing 2FA Setup</mark>

1.  For users without any existing 2FA setup, they will be prompted to activate 2FA upon logging in to the CRM Back Office Portal.\


    <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FyJd2xFrSTPozyLEZnJ4N%2Fimage.png?alt=media&#x26;token=f3895515-c38f-41b3-bffa-4b033531dc6c" alt="" width="233"><figcaption></figcaption></figure>
2. To complete the activation process, users will need to follow the provided steps, input the 2FA code, and then click "Submit."
3. Once 2FA has been setup, the user will be logged into their CRM account.
4.  Users will not be able to disable 2FA via the "My Profile" page.\


    <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FkvHpLZHQMLkTpqXkY8Im%2Fimage.png?alt=media&#x26;token=acc3b159-6259-4b24-9b9e-5d628d24e486" alt="" width="147"><figcaption></figcaption></figure>

### <mark style="color:red;">Application: Users with Existing 2FA Setup</mark>

1. For users who have already set up 2FA, their accounts will remain unchanged.&#x20;
2. They will continue to use 2FA as usual without any alterations to their existing settings.
