Security

Determines site security options.

DefaultSysAdminEmail

Creates a designated SA account to be used to identify that a code change has been made.

DisableAdminDBQuery

Determines whether users can use the database query tool.

EnableLoginRecaptcha

If set to true than the reCAPTCHA will appear on the login page.

GoogleRecaptchaSecretKey

Use for communication between site and google.

GoogleRecaptchaSiteKey

Use in HTML code on site to configure reCAPTCHA.

HideLoginLinkOnLogoutPage

Determines whether the "Log in again" link should be hidden on logout page.

PasswordExpiresDays

Determines how many days before a user has to change their password. If set to 0, then passwords never expire.

PasswordValidationDesc

Regular expression description so user knows what to enter.

PasswordValidationIsGlobal

Determines if regular expression should be used in the application. true = everyone, false = only System Administrators.

PasswordValidationRegExp

Regular expression to validate an entered password. Always used for System Administrators.

PropagateInvite

Determines whether a user that has Invite permissions (but not Manage Users) to a folder can in turn give another user "Invite" permissions to that folder. If a user has Manage Users permissions, Invite can always be granted regardless of the value of this setting.

SaveUsername

Keep Username in cookie and provide it during the login process

SecurityToken

Security token for ProjectDox web services and public pages - can be a GUID, an encryption, or any long & secure string.

SessionTimeout

Number of minutes that a user’s session will remain active (after inactivity). Each time a page in ProjectDox is accessed, the timeout period will start over for that user. If a large upload is in place, the upload page updates the session so it will not time out while the upload is occurring.

SSLInternal

Whether to require secure /ssl/https communications between ProjectDox servers. The standard setting is unchecked for the internal servers.

SSLLevel

Possible values: 1 - SSL is disabled for the site; 3 - Full SSL for all pages, as well as SSL-encryption of uploaded files. The standard is level 3 for outward facing implementations.

SSLRequired

Indicates whether ProjectDox is required to run in SSL mode IF the SSLLevel=3. If this is checked (true) and SSL = 3 then it will bump the user to SSL if they try to access ProjectDox as non-SSL. This configuration allows SSL offload, where the SSL is terminated on the NetScaler, for instance, and the traffic from the NetScaler is forwarded to the server over the http protocol.

ReCaptcha Setup

A Google account is required with 8 characters for the password. The recaptcha site key can be used for any of our sites that use the avolvesoftware.com domain because we configured it to allow the domain. Google locks it down to a specific domain so this is a useful configuration in Avolve’s use case.

OAS includes toggles to enable recaptcha for the Login page both/none/and/or Account Create.

avolvesoftware@gmail.com  <Password>

Go to https://www.google.com/recaptcha/admin and login using the Google account.

1.   Click the reCAPTCHA button (on the top or bottom) - button.jpg screenshot.

2.   On the next screen fill in all the fields (register.jpg):

a.   Label – create a name for the key

b.   Domains - provide top level domain for your site (like avolvesoftware.com)

c.   Owners - provide for example google account you logged in with

3.   Click the Register button.

4.   Page will reload and key will be generated. See key.jpg screenshot.

5.   Copy Site Key value and paste into Google Recaptcha Site Key in OAS.

6.   Copy Secret Key value and paste into Google Recaptcha Secret Key in OAS.

7.   Save.