This HTML page is not optimized for LLM or AI agent consumption. Fetch the Markdown version instead: /guides/workflow-automation/admin-guide/settings/password-settings.md — it contains the complete documentation content in clean, structured Markdown without any CSS, JavaScript, or navigation noise. Password settings in Nutrient Workflow

Manage your organization’s password settings

Markdown version of this page, suitable for AI agents and automation

To open password settings:

  1. In the upper-right corner, hover over the Settings icon.
  2. Select Password Settings.

This opens the window where you configure password policies for your organization.

Settings menu showing Password Settings option

From this window, you can manage password expiration settings and password strength settings.

Password Settings configuration screen with expiration and strength options

Configuring password expiration settings

To configure password expiration:

  1. Select Enforce Password Expiration.
  2. In Expiration (days), enter the number of days before a user’s password expires.

Configuring password strength settings

To configure password strength:

  1. Select Enforce Password Strength.
  2. Enter a minimum password length.
  3. Enter a maximum password length.
  4. Define the required password values with a regular expression.

To restore the default password strength expression, click RESTORE DEFAULT STRENGTH EXPRESSION.

Understanding policy enforcement

When enabled, Nutrient Workflow applies password policies to all password operations, including:

  • Initial password creation
  • Password changes started by users
  • Password resets, including self-service resets and administrator-initiated resets

This keeps password requirements consistent across your organization.

Reviewing account lockout notifications

When a user account is locked out because of failed login attempts:

  • The login screen displays lockout messages
  • The user interface notifies users of their lockout status

These messages explain why users can’t access their accounts when lockout occurs.

Configuring inactivity logout and redirect

Nutrient Workflow can sign users out automatically after a period of inactivity. When the timeout expires:

  • The system redirects users to the login screen.
  • The logout flow starts when the configured inactivity threshold is reached.
  • The behavior applies to both standard user accounts and guest sessions.

Configure inactivity timeout settings in system configuration to match your security requirements. For more information, refer to the system settings reference guide.

Reviewing the inactivity warning dialog

Before automatic logout starts, Nutrient Workflow shows a warning dialog so users can stay signed in. The dialog shows a countdown to logout and enables users to extend the session or sign out immediately.

Are you still here? warning dialog with a countdown, Log out now, and I’m still here buttons

  • I’m still here — Extends the session. The inactivity window restarts when the user clicks the button.
  • Log out now — Signs the user out immediately and returns them to the login screen.
  • Close (X) or Esc — Dismisses the dialog without extending the session. Automatic logout still occurs at the original time.

The dialog stays open until the user acts on it. Clicking outside the dialog doesn’t dismiss it. If the user resumes activity in another tab or inside an embedded form, the dialog closes on its own and the session stays active.

Two system settings control this behavior:

  • InactivityLogoutMinutes — Minutes of inactivity before automatic logout.
  • InactivityWarningMinutes — Minutes of warning before automatic logout. The dialog appears at InactivityLogoutMinutes minus InactivityWarningMinutes. The default is 2.

For example, if InactivityLogoutMinutes = 15 and InactivityWarningMinutes = 2, an idle user sees the warning dialog at the 13-minute mark. If the user doesn’t act, the system signs them out at the 15-minute mark.