Optional security layers

Prerequisites: You need to be an org admin to access these settings.

To enable SSL go to Admin > Settings > Services and select SSL. Place a check in the Enabled checkbox and click Save.

Enabling SSL will block any non-SSL sites from being displayed in the LXP, however if a HTTPS equivalent of the site exists, it will work.

 

Security options

There are additional security options in Admin Area > Settings > Services > Security. 

Enabled	This must be checked for any of the following settings to work.
Password Difficulty	This will change the password requirements for users to an 8 character minimum with at least one number (e.g `2`), one character (e.g `a`), and one symbol (e.g `$`).
Enable account lockout	Users will be locked out for a given period of time after the number of failed logins reaches the lockout threshold. Three things can reset their lockout count: A successful login. Using the "Forgotten your password?" option. An admin manually resetting their password.
Account lockout threshold (default 5)	Select the number of failed login attempts that will result in account lockout.
Account lockout duration	The default is 1 minute. The duration is displayed to the user:
Public Registration Code	This option only appears if public registration is enabled on your LXP. If this code is set then the registration page can only be accessed from a specific link.

Click Save once you're done.