Security#

sysman sysadmin

On this page you configure the security-related settings of your installation: the password policy, multi-factor authentication, restrictions for attachments, and anonymous use of the system.

Password policy#

The password policy defines the requirements a user password must meet. You can choose between three levels:

None: Only a minimum requirement of 5 arbitrary characters applies.
Strong: The standard Allegra password rules apply. A password must be at least 8 characters long and contain at least one digit, one lowercase letter, one uppercase letter, and one special character. Spaces are not allowed.
Custom: You define your own password rule using a valid Java regular expression. Only passwords that match this expression are accepted.

The error message displayed for an invalid password can be customized in the “Translations” section under the key admin.user.manage.err.passwordCustomComplexity.

An AI chat is a convenient way to create the regular expression. Example prompt:
```
Create a Java regular expression that only accepts words
that are at least 8 characters long and contain at least one
uppercase letter and one special character.
```
The result then looks something like this:
```
^(?=.*[A-Z])(?=.*[^a-zA-Z0-9]).{8,}$
```

Multi-factor authentication#

When you enable this setting, multi-factor authentication becomes mandatory for all users, including guests. In addition to their password, users must then sign in with a security code, which by default is sent to them by email.

How often the security code is requested is determined by the verification frequency:

System default: The security code is only requested after a configurable number of days (default: 5) has elapsed, or when the user signs in from an unknown IP address.
Always: The security code is requested at every login.

Attachment size limit#

Here you specify the maximum size of file attachments in MByte. Larger files cannot be uploaded to the server.

Allowed file extensions#

Here you define which file types may be uploaded to the server. Enter the allowed file extensions separated by commas, for example pdf, png, docx. If you leave the field empty, all file extensions are allowed, with the exception of SVG files (see below).

Allow files without extensions#

When you enable this option, files without a file extension can also be uploaded.

Allow SVG files#

SVG files can contain executable code and are therefore a potential security risk. For this reason, uploading SVG files is blocked by default. If you want to use SVG files, for example as icons, you must explicitly allow uploading them here.

Security

Contents