User Policies

Replica manages authentication with Keycloak. Default password, session, and login settings follow common security baselines. Replica SSO administrators handle custom changes. Contact your account manager for exceptions or review the Keycloak documentation.

User Policies

Passwords

• Minimum password length: 15 characters

Login Lockouts (Brute Force Detection)

Default settings:

• Max login failures: 30 — after this point a lockout is triggered.
• Permanent lockout: disabled
• Wait increment: 1 minute before a lockout ends
• Max failure count reset: after 12 hours
• Quick login check: 1 second. Faster attempts trigger a lockout.
• Minimum wait after a quick login: 1 minute before the lockout ends

Login Timeout Settings

Default settings:

• Login Timeout: 30 minutes
• Login action timeout: 5 minutes

SSO Session Settings

Default settings:

• SSO Session Idle: 30 minutes
• SSO Session Max: 10 minutes