Setting Up Login Options

The Login Setup window allows administrators to set login defaults for your firm, such as the mode of authentication (either CCH ProSystem fx or Federation Services), session timeout parameters, and password configuration.

Notes:

• New firms and firms using the CCH ProSystem fx or Federation Services method can no longer select to use the Active Directory® method. This method will be removed in the near future. Until then, firms who already use Active Directory® are not impacted by this change.
• For firms that prefer to use Active Directory® authentication, we recommend using the Federation Services method. New Federation Services implementations should be the Passive type. The Active type is only available to firms who have previously set up that type.

To set up your login configuration, do the following:

1. Open Dashboard, click Configuration on the navigation panel, and then click Firm settings and defaults under Firm.
2. Click Login Setup on the navigation panel.
3. Select a login mode, and then set the configuration options for that mode.
   • CCH ProSystem fx.

   Component	Description
   Session timeout due to inactivity	Select the length of time with no activity before CCH ProSystem fx closes and a new login is required.
   Password expires after	Set the period of time before user passwords must be changed.
   New password cannot repeat the last	Select how frequently a user can recycle an old password. For example, if you enter 6, the staff must change their password 6 times before they can reuse a previous password.
   Allow users to remember their password on the workstation	If selected, users can choose to have the system remember their user names and passwords at login.
   Send Password Expiration email to the users on 5th and 10th day before Password Expiration	Select this option if you want users to receive a reminder email ten and five days before their password is set to expire.
   Send Password Change Confirmation email to users	Select this option if you want users to receive a confirmation email when they change their password in their User Options. Note: Users will not receive a confirmation email if they are a first time user and are changing their default password, or if their password has expired.
   Password policy	Select whether your firm will use the default password policy or a custom policy. Default policy. Passwords must be at least 8 characters and no more than 32 characters, contain an upper or lowercase letter, contain a number or special character. Custom policy. Set the password length and content rules. Note: If you change the password policy, users whose password does not meet the new policy will be prompted to change their password the next time they log in.
   Security Questions	Select whether your firm will use the default security questions or a custom set of questions. Security questions are used when a user has forgotten their password. Default security questions. Select this option to use the default list of 15 security questions. Custom security questions. Create 3 to 15 custom security questions. Note: If you change the security questions, users will be forced to change their security questions the next time they log in if their current security questions are no longer included in the new set.

   • Active Directory®.

     Component	Description
     Active Directory	If your firm is already setup to use this login method, you can change your session timeout and auto-link settings. Firms using CCH ProSystem fx or Federation Services can no longer change to the Active Directory® method.
     Enable auto-link of unmapped AD users to staff based on matching system email address	Select this option to automatically link your AD users to CCH ProSystem fx staff based on his/her email address.

   Note: We recommend for firms that prefer to use Active Directory authentication select the Federation Services method.

   • Federation Services

   This option is unavailable until you have selected Enable Pilot mode for Federation login and successfully completed a pilot test by the default system administrator A user account created at installation with full rights and ownership of the organizational structure..

   • Once you select this option, the Federation Services Login setup window displays. Confirm the settings from the pilot test and click Finish.

   Important: Wolters Kluwer may need to make changes to your account to ensure continued access to the new ProSystem fx Suite after you implement Federation Services. Before beginning Federation Services setup, we recommend reviewing the knowledge base article Planning for Changes to CCH Axcess Login Mode, and then contacting Wolters Kluwer so we can make the necessary changes.

   • Explain the components of the window.

     Component	Description
     *View current Federation login settings	Firm administrators can select to review the firm's current login setting and also regenerate metadata.
     Session timeout due to inactivity	Set the period of time before the session times out.
     Enable Pilot mode for Federation login	If your firm needs to update the Federation Services settings, you must pilot test the settings prior to applying the changes. Select if you want to test the Federation login method.
     *Configure Federation login settings	Click to review or update your current AD FS settings. Note: When AD FS settings other than certificate settings are changed, metadata should be regenerated and trust should be re-established.
     *Regenerate metadata	Regenerate the metadata, if necessary.

     *These options are available after Federation login settings are established.

4. Click OK to save your changes.