GAM Web Backoffice - Security Policies section

This documentation is valid for:
GeneXus 18 Help

This article describes the Security Policies section of the GAM Web Backoffice, which allows you to define and manage password policies, account locking rules, and other security-related settings.

This section offers three important actions:

1. Add a security policy

Press the ADD button to create a new security policy.

This action opens a form where you can configure all necessary settings, such as password requirements, account session settings, etc.

General

ID: Displays the unique identifier for the policy.
GUID: The globally unique identifier for this security policy.
Name: Write the name of the security policy.

Only Web

Allow multiple concurrent user sessions: A dropdown menu allows you to select if various sessions from different IP addresses are allowed. In the GeneXus IDE, this option corresponds to the AllowMultipleConcurrentWebSessions property in GAMSecurityPolicy EO.
Session timeout (minutes): Defines the time of inactivity (in minutes) after which a session will automatically expire. In GeneXus, this option corresponds to the WebSessionTimeOut property in GAMSecurityPolicy EO.

Only REST OAuth (Mobile, GAMRemoteRest)

Token Expiration (minutes): Specifies an OAuth token's duration (in minutes) before it becomes invalid. In the GeneXus IDE, this option corresponds to the OauthTokenExpire property in GAMSecurityPolicy EO.
Token maximum renovations: Defines the maximum number of times an OAuth token can be refreshed. In the GeneXus IDE, this option corresponds to the OauthTokenMaximumRenovations property in GAMSecurityPolicy EO.
OAuth refresh_token expiration (minutes): Sets the time, in minutes, that a refresh_token will remain active. In the GeneXus IDE, this option corresponds to the OAuthRefreshTokenExpire property in GAMSecurityPolicy EO.
OAuth access_code expiration (seconds): Defines, in seconds, that an access code remains valid before expiring. In the GeneXus IDE, this option corresponds to the OAuthAccessCodeExpire property in GAMSecurityPolicy EO.

Password Management

Period change password (minutes): Specifies how often users are required to change their password (in minutes).
Minimum waiting time between password changes (minutes): Minimum time before a user can change their password again. In the GeneXus IDE, this option corresponds to MinimumTimeToChangePasswords property in GAMSecurityPolicy EO.
Minimum password length: The shortest length allowed for passwords.
Minimum number of numeric characters in passwords: Requires a minimum number of numbers in a password.
Minimum number of uppercase characters in passwords: Sets the minimum of uppercase letters in the password.
Minimum number of special characters in passwords: Requires a specified number of special characters (For example: @, #, $).
Maximum password history entries: Limits how many previous passwords are remembered. In the GeneXus IDE, this option corresponds to MaximumPasswordHistoryEntries property in GAMSecurityPolicy EO.

2. Copy a security policy

This link allows you to duplicate the existing security policy.

After clicking on Copy to duplicate a policy, the message “INFORMATION: Security Policy was copied successfully!” is displayed.

3. Edit a security policy

This link allows you to edit a specific security policy.

After clicking on the Edit link, the following form is displayed:

In the EDIT section of a Security Policy, you'll find two buttons:

DELETE
MORE OPTIONS

DELETE button: Removes the selected security policy from the Web Backoffice.
MORE OPTIONS combo:
- Custom Properties: Allows you to add custom properties for the security policy.
- Copy: Creates a duplicate of the current security policy.
- Translations: Adds translations of the Security Policy into different languages.