Password Policy Audits and password failure monitoring

[Chamundeeswari]

Hi,

Do we have support in Saviynt for the following scenarios:

• Conducting regular audits of password policies and configurations
• Monitoring password-related activities, such as failed login attempts, for security and compliance purposes.
• Account lockout after X number of unsuccessful login attempts (to prevent Brute-force attacks)
• An alternative integration to traditional password-based authentication such as biometrics

Thanks!

[adarshk]

• Conducting regular audits of password policies and configurations - Changes on Password policies can be restricted to Admin only using SAV role and the same can be monitored with History or Audit Logs
• Monitoring password-related activities, such as failed login attempts, for security and compliance purposes. - Audit Logs will provide you the activity history
• Account lockout after X number of unsuccessful login attempts (to prevent Brute-force attacks) - Saviynt will provision the password, lockout needs to be handled at target application
• An alternative integration to traditional password-based authentication such as biometrics - Currently Password Based and MFA is supported. 

[Chamundeeswari]

Hi Adarsh,

Thanks for your response. About Account lockout, in cases where SSO is not configured in Saviynt and we use the default Saviynt login page, does Saviynt has its own Account Lockout functionality  for failed login attempts? If yes, is this audited ?

Thank you!

Cheers 🙂

[rushikeshvartak]

Its audited under Admin - Admin Functions - Audit Trails as well as individual user history tab