mTAN
This table lists the policy parameters specific to mTAN credentials.
In addition to the policy parameters defined in this table, the policy parameter defined in the table under All credential types is also valid for mTAN credentials.
Name | Data Type, Values | Default | Description |
---|---|---|---|
credentialLifetime | Data type: int (>0) | 10 years in milliseconds | The time to live (in milliseconds) of the mTAN credential. After the defined period of time, the user will not be able to log in with this mTAN credential anymore. |
maxCredFailureCount | Data type: int (>0) or -1 | 3 | Maximum number of login failures before a password is definitely locked. If set to "-1", the max. failure counter is disabled. |
tmpLockingDuration | Data type: long | 60000 | Duration of the temporary locking in milliseconds. Use a tmpLockingDuration of at least 30000 since the exact duration cannot be guaranteed below this value. |
tmpLockingMode | Data type: String Values: strict, threshold | strict | strict: when the first temporary locking period is over, the user can try to log in only once before the next temporary locking period activates. threshold: the user can always try "tmpLockingThreshold" times to log in before the next temporary locking period activates. |
tmpLockingThreshold | Data type: int (>0) or -1 | 2 | Number of login failures before the mTAN credential is temporarily locked. If set to "-1", the temporary lock is disabled. |