45-Day Inactivity Lock
Inactive users are locked out after 45 days of inactivity. Managers can unlock the users in the system if they're locked out, or users can contact AT&T Cybersecurity support to have their account unlocked. Once an account has been unlocked, the user needs to log back in the same day for the system to save their unlocked status.
To unlock an account
- Go to Settings > Users.
- Click the button.
Note: This complies with the Payment Card Industry (PCI) Standard 8.5.5.
Brute Force IP Block
After six failed login attempts on an account, the system automatically locks the account. Once a user account is locked out, it remains locked for a minimum of 30 minutes or until a system administrator resets the account.
Note: This complies with the PCI Standard 8.5.13.