Skip to main content
Procore

Enable Security Settings for Logins, Passwords, and Session Timeout Intervals

Objective

To request to enable security settings for logins, passwords, and session timeout intervals. 

Background

If you are your company's Procore Administrator or if your Procore user account has been granted 'Admin' level permissions to the Company level Admin tool, you have the proper authority to submit a request to modify select security settings for the Procore web application. You can choose to enable settings for locking out users after failed login attempts, password expiration policies, and a timeout interval for idle user sessions. 

Things to Consider

  • Required User Permission:
    • 'Admin' level permission to the company's Admin tool. 
  • Additional Information:
    • For new company accounts, the settings below are configured during the Procore Implementation Process. 
    • For existing company accounts, a user with the appropriate permissions must submit a request. 
  • Limitations:
    • These are company-wide settings. They cannot be applied on a per-project or per-user basis. 

Steps

Step 1: Request to Enable Security Settings

If you want to make changes to your company's security settings, a user with 'Admin' level permission to the company's Admin tool can email a request to your Procore point of contact.

Step 2: Review Your Company Account's Security Settings

  1. Navigate to the company's Admin tool. 
  2. Click Company Settings.
  3. Under Security Settings, review the following:

    security-settings.png
     
    • Lock Out After 3 Failed Sign In Attempts. Choose from these options:
      • Yes. If this setting is turned ON, users with be locked out of Procore after three (3) failed login attempts.
      • No. If this setting is turned OFF, there is no limit to the number of failed login attempts that can be made by an end user. 
    • Password Expiration. Choose from these options:
      • Never. User passwords never expire. 
      • 30 Days. User passwords expire after 30 days. 
      • 60 Days. User passwords expire after 60 days. 
      • 90 Days. User passwords expire after 90 days.
    • Session Idle Timeout. Choose from these options:
      • No Timeout. This is the default setting.
      • 15 minutes. Ends an inactive user's session after 15 minutes of inactivity. 
      • 30 minutes. Ends an inactive user's session after 30 minutes of inactivity.
      • 60 minutes. Ends an inactive user's session after 60 minutes of inactivity. 
      • 120 minutes. Ends an inactive user's session after 120 minutes of inactivity.

See Also

  • Was this article helpful?