System Security Defaults Fields

This is a reference article describing the fields and input options for the System Security Defaults form. The System Security Defaults form allows you to define myAvatar's general access and security settings. 

► Password Settings Fields

Field Name	Field Options	Results	Netsmart Best Practice
Enable SaaS Security Enhancements	Yes/No	Selecting Yes will: Make the Special Character Requirement field be set to Yes and disabled. Make the Prohibit Passwords From Including User ID field be set to Yes and disabled. Enforce the minimum password length to be set to eight characters or greater. Require any user whose current password does not meet these requirements be prompted to choose a new password upon next log in. Selecting No will: Allow the Special Character Requirement field to be configured as Yes or No. Allow the Prohibit Passwords From Including User ID field to be configured as Yes or No. Not enforce a minimum password length.	Netsmart recommends setting this field to Yes.
Minimum Password Length	Number	If Enable SaaS Security Enhancements is set to Yes, this field's minimum allowed value will be 8 or greater characters. If SaaS is turned off, the allowed length can contain a value of 1 to 9999.	Netsmart recommends using the SaaS recommended setting of 8 or greater characters.
Maximum Password Length	Number	If Enable SaaS Security Enhancements is set to Yes, this field's minimum password length will be 8 or greater characters. If SaaS is turned off, the maximum password length can contain a value of 1 to 9999.	Netsmart recommends using the SaaS recommended setting of 8 or greater characters.
Alpha Requirement	Yes/No	This field determines whether an end user will be required to have an alpha character in a login's password.   Selecting Yes will require an alpha character to be present in the password. Examples: BLUE gReen Selecting No will not require an alpha character to be present in the password. Examples: blue green	Netsmart recommends setting this field to Yes.
Require Mixed Case Alpha Characters in Passwords	Yes/No	This field determines whether an end user will be required to have upper- and lower-case letters in a login's password. Selecting Yes will require upper- and lower-case character to be present in the password. Examples: Blue greeN Selecting No will not require upper- and lower-case character to be present in the password. Examples: BLUE green	Netsmart recommends setting this field to Yes.
Numeric Requirement	Yes/No	This field determines whether an end user will be required to have a numeric character in a login's password. Selecting Yes will require a numeric character to be present in the password. Examples: blue1 green1 Selecting No will not require a numeric character to be present in the password. Examples: blue green	Netsmart recommends setting this field to Yes.
Special Character Requirement	Yes/No	This field determines whether special character(s) will be required in an end-user's password. Selecting Yes will require passwords to contain at least one special character. If the Enable SaaS Security Enhancements is set to Yes, the field will be automatically set to Yes. Valid special characters are: % @ # $ ! * ? / + > < [ ] { } \ - Example: Password = myAvatar#99 Selecting No will not require passwords to contain any special character(s). Example: Password = myAvatar99	Netsmart recommends setting this field to Yes (or setting the Enable SaaS Security Enhancements field to Yes).
Default Term Duration (Days)	Number	Enter a system defaulted numeric value that passwords are active before they expire. This data will default when a new user is created into the Password Term Duration (Days) field found within the User Definition form. A system administrator can modify the defaulted value when creating and/or modifying a user. If the password expires/terms, a system administrator can assign the user a new password (User Definition or Quick User Definition). For agencies using User File Import, all new users that are imported will have this default value assigned to the users in the Password Term Duration (Days) field. If users do not log into myAvatar before the default days are expired/termed, each user's password will have to be manually updated by a system administrator.	N/A
Default Number of Days for Reminder Notification	Number	Enter the number of days before a password expires that a notification message is sent to a user.	N/A
Deactivate User After a Specified Number of Login Failures	Yes/No	This field determines whether accounts are deactivated after failed login attempts. Selecting Yes will deactivate user accounts after a certain number of incorrect login attempts and make the Number of Login Failures for User Deactivation field required. Selecting No will not deactivate user accounts after a certain number of incorrect login attempts and make the Number of Login Failures for User Deactivation field disabled and not required.	N/A
Number of Login Failures for User Deactivation	Number	Enter the number of failed logins before a user's account is deactivated. If a user is inactivated due to failed login attempts, users can be reactivated in the User Definition, Quick User Definition, and Quick User Update forms. To add a security question, use the User Failed Authentication Question form. This function adds a security question prompt for an end user if the myAvatar login is attempted with an incorrect password.	N/A
Enable Non-Case Sensitive Login	Yes/No	This field determines whether logins enforce non-case sensitive logins. Selecting Yes will disregard whether letters are upper- or lower-case during login. Selecting No will not disregard whether letters are upper- or lower-case during login.	N/A
Allow Reuse of Prior Passwords	Yes/Yes After a Specified Number of Days/No	This field determines whether end-users can reuse prior passwords. Selecting No will not allow a user's password to be reused. Selecting Yes will allow a user's password to be reused without any restriction on days since the existing password was used. Selecting Yes After a Specified Number of Days will make the Number of Days Until Password Reuse field enabled and required.	N/A
Number of Days Until Password Reuse	Number	This field allows a user's passwords to be reused after the number of days specified in the field has passed.	N/A
Allow Users To Reset Expired Password	Yes/No	This field determines whether end-users can reset expired passwords.   Selecting Yes will allow end users to reset expired passwords. Selecting No will not allow end users to reset expired passwords. If end users are not able to reset passwords, a system administrator (and/or user with access to User Definition, Quick User Definition, and/or Quick User Update) will be required to reset the passwords.	N/A
Prohibit Passwords From Including User ID	Yes/No	This field determines whether end-users are allow to include User IDs in passwords.   Selecting Yes will not allow end users to include User IDs in passwords. A System Administrator can update the password to include the User ID in User Definition, Quick User Definition,and/or Quick User Update, but when an end user logs into myAvatar, it will prompt them to reset the password (which will not be allowed to include the User ID). Examples: User ID = Netsmart Password = myAvatar#99   Selecting No will allow end users to include User IDs in passwords. A System Administrator can update the password to include the User ID in User Definition, Quick User Definition, and/or Quick User Update, but when an end user logs into myAvatar, it will prompt them to reset the password (which will be allowed to include the User ID). Examples: User ID = Netsmart Password = Netsmart#99	Netsmart recommends setting this field to Yes.

► User Definition Settings Fields

Field Name	Field Options	Results	Netsmart Best Practice
Include Supplemental Information Within User Definition	Yes/No	This field can add additional demographic information to be captured for individual users. Selecting Yes enables the Supplemental Information section in the User Definition and Quick User Definition form. The Supplemental Information section contains fields to record user demographic data. The Position Class field allows a myAvatar user to be assigned as a myAvatar MSO care manager. Selecting No disables the Supplemental Information section in the User Definition form.	Netsmart recommends setting this field to Yes.
Include 'User Is Colorblind' in User Definition and User Preferences	Yes/No	This field allows users to be setup as colorblind. Selecting Yes will add the User is Colorblind field to the User Definition form. Selecting No will remove the User is Colorblind field from the User Definition form.	N/A
Application Timeout Behavior	Yes/No	This field determines whether users' sessions are exited (kicked out) or locked when left inactive. This setting only impacts myAvatar functionality and not a user's workstation/PC behaviors. Selecting Exit Application will close out an inactive user's myAvatar session. Any forms, reports, etc. will be closed and lost (outside of auto saved content) once myAvatar has been closed out. Selecting Lock Application will lock an inactive user's myAvatar session. Any forms, reports, etc. will remain open once myAvatar has locked the session.	N/A
Lock Screen Timeout (In Seconds)	Exit Application/Lock Application	This field determines how many seconds a user can be inactive before myAvatar will either lock or exit the session. Enter a numeric value from 1-999999999.	N/A
Enable Signature Pad Support	Yes/No	This field determines whether signature pads can be used with myAvatar . This includes adding signature fields to forms, capturing signatures on form, and/or using a signature pad device with myAvatar .  Signature Pad functionality is an additional add-on myAvatar product which must be licensed from Netsmart Technologies. Selecting Yes will enable Signature Pad Support.  Selecting No will disable Signature Pad Support.	N/A
Signature Timeout (In Seconds)	Number	This field determines the amount of time (seconds), that a signature field with timeout. Enter a numeric value from 30-99999.	N/A

► Example

Note: this image was captured from myAvatar in April of 2022 and may look different from more updated versions.