90-Day Inactivity Lock
Inactive users are locked out after 90 days of inactivity. Managers can unlock the users in the system if they're locked out, or users can contact AT&T Cybersecurity support to have their account unlocked. Once an account has been unlocked, the user needs to log back in the same day for the system to save their unlocked status.
To unlock an account
- Go to Settings > Users.
- Click the Unlock button.
Note: This complies with the Payment Card Industry (PCI) Standard 8.5.5.
Brute Force IP Block
After six failed login attempts on an account, the system automatically locks the account. The user then receives an email notifying them of the lockout, and is provided a link to reactivate access to the account.
Note: This complies with the PCI Standard 8.5.13.