[{"data":1,"prerenderedAt":483},["ShallowReactive",2],{"navigation":3,"/features/policies":166,"/features/policies-surround":478},[4,23,44,89,111,136],{"title":5,"path":6,"stem":7,"children":8,"icon":22},"Getting Started","/getting-started","1.getting-started/1.index",[9,12,17],{"title":10,"path":6,"stem":7,"icon":11},"Introduction","i-lucide-house",{"title":13,"path":14,"stem":15,"icon":16},"Installation","/getting-started/installation","1.getting-started/2.installation","i-lucide-download",{"title":18,"path":19,"stem":20,"icon":21},"Usage","/getting-started/usage","1.getting-started/3.usage","i-lucide-sliders",false,{"title":24,"icon":22,"path":25,"stem":26,"children":27,"page":22},"Time tracking & monitoring","/time-tracking","2.Time Tracking",[28,32,36,40],{"title":29,"path":30,"stem":31},"Time & Projects","/time-tracking/timeandprojects","2.Time Tracking/Time&Projects",{"title":33,"path":34,"stem":35},"Time Tracking","/time-tracking/time-tracking","2.Time Tracking/Time-tracking",{"title":37,"path":38,"stem":39},"Timeboard","/time-tracking/timeboard","2.Time Tracking/TimeBoard",{"title":41,"path":42,"stem":43},"Timesheets","/time-tracking/timesheets","2.Time Tracking/Timesheets",{"title":45,"icon":22,"path":46,"stem":47,"children":48,"page":22},"Features","/features","3.features",[49,53,57,61,65,69,73,77,81,85],{"title":50,"path":51,"stem":52},"Dashboard","/features/dashboard","3.features/1.dashboard",{"title":54,"path":55,"stem":56},"SMTP troubleshoot","/features/smtp-troubleshoot","3.features/10.smtp-troubleshoot",{"title":58,"path":59,"stem":60},"Calendar & Leave Overview","/features/calendar","3.features/2.calendar",{"title":62,"path":63,"stem":64},"Calendar Integration","/features/calendar-integration","3.features/3.calendar-integration",{"title":66,"path":67,"stem":68},"Shift Scheduling","/features/schedules","3.features/4.schedules",{"title":70,"path":71,"stem":72},"Project Management","/features/projects","3.features/5.projects",{"title":74,"path":75,"stem":76},"Expense Settings","/features/expense-settings","3.features/6.expense-settings",{"title":78,"path":79,"stem":80},"Auth0 SSO Integration","/features/auth0-integration","3.features/7.auth0-integration",{"title":82,"path":83,"stem":84},"Password & Authentication Policy","/features/policies","3.features/8.policies",{"title":86,"path":87,"stem":88},"Email Configuration (SMTP)","/features/email-configuration","3.features/9.email-configuration",{"title":90,"icon":22,"path":91,"stem":92,"children":93,"page":22},"Expenses","/expenses","4.expenses",[94,98,102,106],{"title":95,"path":96,"stem":97},"Expense Claims","/expenses/overview","4.expenses/1.overview",{"title":99,"path":100,"stem":101},"Add & Manage Purchases","/expenses/purchases","4.expenses/2.purchases",{"title":103,"path":104,"stem":105},"Travel & Mileage Entry","/expenses/travelentries","4.expenses/3.travelentries",{"title":107,"path":108,"stem":109,"icon":110},"Company Card Expenses","/expenses/company-cards","4.expenses/4.company-cards","i-lucide-credit-card",{"title":112,"icon":22,"path":113,"stem":114,"children":115,"page":22},"Settings","/settings","5.settings",[116,120,124,128,132],{"title":117,"path":118,"stem":119},"General","/settings/general","5.settings/1.general",{"title":121,"path":122,"stem":123},"Leave Types","/settings/leavetype","5.settings/2.leaveType",{"title":125,"path":126,"stem":127},"Carry Forward","/settings/carryforward","5.settings/3.carryForward",{"title":129,"path":130,"stem":131},"Department Management","/settings/departments","5.settings/4.departments",{"title":133,"path":134,"stem":135},"Public Holidays","/settings/publicholiday","5.settings/5.publicholiday",{"title":137,"path":138,"stem":139,"children":140,"page":22},"Mcp","/mcp","6.mcp",[141,146,151,156,161],{"title":142,"path":143,"stem":144,"icon":145},"Overview","/mcp/overview","6.mcp/1.overview","i-lucide-bot",{"title":147,"path":148,"stem":149,"icon":150},"Connecting","/mcp/connecting","6.mcp/2.connecting","i-lucide-plug",{"title":152,"path":153,"stem":154,"icon":155},"Tools Reference","/mcp/tools","6.mcp/3.tools","i-lucide-wrench",{"title":157,"path":158,"stem":159,"icon":160},"Security","/mcp/security","6.mcp/4.security","i-lucide-shield",{"title":162,"path":163,"stem":164,"icon":165},"Integrating Your Own MCP Client","/mcp/custom-client","6.mcp/5.custom-client","i-lucide-code",{"id":167,"title":82,"body":168,"description":471,"extension":472,"links":473,"meta":474,"navigation":475,"path":83,"seo":476,"stem":84,"__hash__":477},"docs/3.features/8.policies.md",{"type":169,"value":170,"toc":453},"minimark",[171,176,184,187,200,203,206,210,216,218,223,226,240,242,246,249,277,279,283,294,302,304,308,314,316,320,327,338,340,344,347,358,365,367,371,374,383,427,429,433],[172,173,175],"h2",{"id":174},"what-is-password-authentication-policy","What Is Password & Authentication Policy?",[177,178,179,180,183],"p",{},"The ",[181,182,82],"strong",{}," section allows administrators to define and enforce security rules for user access.",[177,185,186],{},"These policies control:",[188,189,190,194,197],"ul",{},[191,192,193],"li",{},"Password complexity and validation",[191,195,196],{},"Password reset behavior",[191,198,199],{},"Two-Factor Authentication (2FA) requirements",[177,201,202],{},"All configured rules are applied across the organization.",[204,205],"hr",{},[172,207,209],{"id":208},"configuring-password-policy","Configuring Password Policy",[177,211,179,212,215],{},[181,213,214],{},"Password Policy"," tab defines the rules users must follow when creating or updating passwords.",[204,217],{},[219,220,222],"h3",{"id":221},"when-password-policies-apply","When Password Policies Apply",[177,224,225],{},"Password rules are enforced during:",[188,227,228,231,237],{},[191,229,230],{},"Password changes initiated by the user",[191,232,233,234],{},"Password resets via ",[181,235,236],{},"Forgot Password",[191,238,239],{},"New user registrations",[204,241],{},[219,243,245],{"id":244},"password-requirements","Password Requirements",[177,247,248],{},"Administrators can configure password constraints such as:",[188,250,251,254,271,274],{},[191,252,253],{},"Minimum password length",[191,255,256,257],{},"Required character types:\n",[188,258,259,262,265,268],{},[191,260,261],{},"Uppercase letters",[191,263,264],{},"Lowercase letters",[191,266,267],{},"Numbers",[191,269,270],{},"Special characters",[191,272,273],{},"Restrictions on weak or commonly used passwords",[191,275,276],{},"Password confirmation validation",[204,278],{},[219,280,282],{"id":281},"validation-behavior","Validation Behavior",[188,284,285,288,291],{},[191,286,287],{},"Passwords must meet all defined requirements before submission",[191,289,290],{},"Validation occurs in real time during entry",[191,292,293],{},"Non-compliant passwords are rejected with error messages",[295,296,299],"callout",{"color":297,"icon":298},"amber","i-lucide-shield-alert",[177,300,301],{},"Users cannot proceed until all password requirements are satisfied.",[204,303],{},[172,305,307],{"id":306},"two-factor-authentication-2fa","Two-Factor Authentication (2FA)",[177,309,179,310,313],{},[181,311,312],{},"Two-Factor Authentication"," tab enables an additional verification step during login.",[204,315],{},[219,317,319],{"id":318},"enabling-2fa","Enabling 2FA",[177,321,322,323,326],{},"When ",[181,324,325],{},"Require Two-Factor Authentication"," is enabled:",[188,328,329,332,335],{},[191,330,331],{},"All users must configure 2FA",[191,333,334],{},"Users without setup are redirected to the setup flow on login",[191,336,337],{},"Access is restricted until setup is complete",[204,339],{},[219,341,343],{"id":342},"_2fa-setup","2FA Setup",[177,345,346],{},"Users are guided through the setup process:",[188,348,349,352,355],{},[191,350,351],{},"Select an authentication method (e.g., authenticator app)",[191,353,354],{},"Link the method to their account",[191,356,357],{},"Complete verification",[295,359,362],{"color":360,"icon":361},"blue","i-lucide-smartphone",[177,363,364],{},"2FA setup is enforced at login if not previously configured.",[204,366],{},[219,368,370],{"id":369},"login-behavior","Login Behavior",[177,372,373],{},"Authentication requires two steps:",[375,376,377,380],"ol",{},[191,378,379],{},"Username and password",[191,381,382],{},"Second-factor verification",[384,385,386,399],"table",{},[387,388,389],"thead",{},[390,391,392,396],"tr",{},[393,394,395],"th",{},"Scenario",[393,397,398],{},"Result",[400,401,402,411,419],"tbody",{},[390,403,404,408],{},[405,406,407],"td",{},"Valid credentials + valid 2FA",[405,409,410],{},"Access granted",[390,412,413,416],{},[405,414,415],{},"Valid credentials + invalid 2FA",[405,417,418],{},"Access denied",[390,420,421,424],{},[405,422,423],{},"Missing 2FA setup",[405,425,426],{},"Redirect to setup",[204,428],{},[172,430,432],{"id":431},"notes","Notes",[188,434,435,441,444,447],{},[191,436,437,438],{},"Policies are enforced ",[181,439,440],{},"organization-wide",[191,442,443],{},"Changes apply immediately after saving",[191,445,446],{},"Existing users may be required to comply on next login or password update",[191,448,449,450],{},"Access and configuration options depend on ",[181,451,452],{},"administrator permissions",{"title":454,"searchDepth":455,"depth":456,"links":457},"",1,2,[458,459,465,470],{"id":174,"depth":456,"text":175},{"id":208,"depth":456,"text":209,"children":460},[461,463,464],{"id":221,"depth":462,"text":222},3,{"id":244,"depth":462,"text":245},{"id":281,"depth":462,"text":282},{"id":306,"depth":456,"text":307,"children":466},[467,468,469],{"id":318,"depth":462,"text":319},{"id":342,"depth":462,"text":343},{"id":369,"depth":462,"text":370},{"id":431,"depth":456,"text":432},"Learn how to configure password rules and authentication controls to secure access across your organization.","md",null,{},true,{"title":82,"description":471},"7uA0ZnpR8n3HiNrWFE7vP7G4rNK4O87SRCbbeRWGQQc",[479,481],{"title":78,"path":79,"stem":80,"description":480,"children":-1},"Learn how to configure Auth0 Single Sign-On (SSO) in BookYourPTO, including application setup, credentials, and authentication settings.",{"title":86,"path":87,"stem":88,"description":482,"children":-1},"Learn how to configure SMTP settings to enable system emails such as notifications, alerts, and user communications.",1774284205585]