Introduction

Account Security gives administrators one place to protect your NUACOM account. Choose how users sign in, set password rules, turn on two-factor authentication, limit access to approved IP addresses and manage your account PIN.

Please Note: Account Security is now a standalone page. It used to be a tab inside Account Settings. Your existing settings have not changed.

Please Note: Only account admins can view and change these settings.

Opening Account Security

1. Log in to the NUACOM web portal as an admin.
2. Go to Settings > Account Security.

The page is split into Login options and PIN Code.

Saving your changes

When you change a setting, Reset changes and Save Changes appear at the bottom of the page.

• Click Save Changes to apply your changes. You will see the message "Security settings saved".
• Click Reset changes to go back to the last saved settings.

Important: Make sure at least one sign-in method (Local Login or Single Sign-On) stays on. If you turn off all sign-in methods and save, nobody will be able to log in with a password or SSO.

Login options

Local Login

Turn this on to let users sign in with their registered email and password. Turn it off if you only want users to sign in with Single Sign-On.

When Local Login is on, you can also set the password options below. When it is off, these options are hidden.

2FA Authentication

Turn this on to require two-factor authentication for all users on the account. When 2FA is challenged, the user receives a one-time code by email and enters it on the login screen.

2FA is not asked every time. NUACOM looks at how each user logs in and asks for the extra code when something looks different. For example:

• Login from a new device
• Login from a new location
• Login after a recent password reset

Additional information: If you need 2FA for only some users, keep 2FA Authentication off on this page. Then turn on 2FA for each user from the Users page.

Block compromised passwords

Turn this on to stop users from choosing a password that has appeared in a known data leak. NUACOM checks passwords against the list of leaked passwords from Have I Been Pwned.

Character limit

Set the minimum number of characters for all passwords on the account. Use − and + to choose a value between 8 and 32. The default is 8.

Change password

Choose how often users must change their password. Select Never, or pick a period from every month up to every 12 months.

Default password rules

On top of the character limit, these rules apply to every account:

• At least 6 letters
• At least 1 lowercase letter
• At least 1 uppercase letter
• At least 1 number
• At least 1 special character
• No password reuse

Single Sign-On (SSO)

Turn on Single Sign-On to let users sign in with their Google or Microsoft account. Choose one or both:

• Google SSO
• Microsoft SSO

To allow only SSO logins, turn Local Login off.

Tenant ID (Microsoft SSO)

When Microsoft SSO is on, add the Microsoft tenant IDs that are allowed to sign in. This protects your account from disguised or look-alike corporate email addresses.

1. Type your Tenant ID in the Tenant ID field.
2. Click + to add it to the list.
3. Repeat for each tenant, up to 10.
4. Click Save Changes.

Use the pencil icon to edit a tenant ID and the bin icon to remove it.

Additional information: Not sure where to find your Tenant ID? Click Where can I find my Tenant ID? next to the field, or hover over the (i) icon. A tenant ID, also called a Directory ID, is a unique code that identifies your organization in Microsoft Entra ID. Enter the tenant ID code itself, not your domain name.

IP Restrictions

Turn on IP Restrictions to allow users to log in to the portal only from IP addresses you approve.

1. Turn on IP Restrictions.
2. Type an IP address or network range in Allowed IP Ranges, for example 8.8.8.8 or 8.8.4.0/24.
3. Click + to add it to the list.
4. Repeat for each address or range, up to 100.
5. Click Save Changes.

Important: Add your own IP address before you turn on IP Restrictions and save. If your current IP is not on the list, you could be locked out of the portal.

Please Note: Only public IPv4 addresses and ranges are supported. IPv6 and private addresses (for example 192.168.x.x) cannot be saved.

Editing and removing IPs

• Use the pencil icon to edit an IP, then click the tick to confirm.
• Use the bin icon to remove an IP.
• Editing or removing an IP that is already saved takes effect straight away. You do not need to click Save Changes.
• After you remove a saved IP, click Undo in the "IP range removed" message to bring it back.

PIN Code

The account PIN is created automatically when your account is set up. You use it to run features from a handset. For example, you can record a system announcement by dialling the short code 266 and entering the PIN.

Admins can change the PIN at any time.

1. In the PIN Code section, click Change PIN.
2. Enter your new 6-digit PIN in New PIN.
3. Enter it again in Repeat new PIN.
4. Click Save PIN.

When it works, you will see "PIN successfully updated". Click Close.

Click Show PIN to see the digits as you type. Click Hide PIN to hide them again.

Additional information: If the two PINs are different, you will see "The entered PINs do not match. Please check them and try again." Re-enter them to continue. The PIN is changed as soon as you click Save PIN. You do not need to click Save Changes.

FAQ

Who can change Account Security settings? Only account admins.

I can't find Account Security in Account Settings anymore. Where did it go? It has moved to its own page. Go to Settings > Account Security.

Did my existing settings change with the update? No. Your login options, password rules, IP restrictions and PIN stay as they were.

Will users be asked for a 2FA code every time they log in? No. A code is only requested when something looks different, such as a new device, a new location, or a recent password reset.

I turned on IP Restrictions and now I can't log in. What do I do? Contact our support team. To avoid this, add your own IP address to the list before you save.

Can I use IPv6 addresses? Not yet. Only IPv4 is supported.