I am looking for the best practices for creating a login policy/password policy for our DocuSign end users.
In a DocuSign support article, it states: The DocuSign system allows users a set number of log-in attempts with an incorrect password. For account security, if a user enters the wrong password too many times, the system locks the user out temporarily. Users can attempt to log in again after a brief waiting period.
What is the number of log-in attempts before the system locks the user? What is the waiting period? Can these be altered by our account admins?
Additionally, I am trying to figure out information on when two-factor authentication happens. Can account admins make this a feature for unrecognized devices, or is it an automatic system setting?