👤 Local Login
In addition to the existing authentication methods, HYBO supports a local login using username and password.
This authentication method can be used when:
There is no integration with external identity providers
An additional or alternative authentication mechanism is required
🔐 Multi-Factor Authentication (MFA)
To increase security, local login supports Multi-Factor Authentication (MFA) using an authenticator application.
What is an Authenticator?
An Authenticator is an application that provides two-factor authentication (2FA), ensuring that only authorized users can access their accounts and services.
By requiring a second verification factor in addition to the password, the Authenticator adds an extra layer of protection and helps prevent unauthorized access, even if a password has been compromised.
🔑 Password Management Policies
HYBO supports custom password management policies designed to enforce secure credential practices.
The following security requirements may be applied:
Password expiration
Users are required to change their password periodically.
Standard policy: password expiration every 30 days
In some organizations: password expiration every 45 days
Minimum length and complexity
Passwords must meet minimum security requirements:
Minimum length: 8 characters
Complexity requirements: passwords must include a combination of different character types (such as uppercase, lowercase, numbers, or special characters)
Password history
To prevent reuse of previous credentials:
Users cannot reuse their last 3 passwords
Password reset limitation
To prevent misuse of the reset process:
Password reset is limited to once per day