Security

Related Topics

The Security tab displays the security options set up for the credit union. Use the following links to learn more about the options in each section of the Security tab:

To access the Credit Union Profile - Security tab, under Administration on the Portico Explorer Bar, select Profiles. On the Profiles top menu bar, select System, and then select Credit Union. The Credit Union Profile window appears. Select the Security tab.

Credit Union Profile - Security

How do I? and Field Help

The following fields and checkboxes appear in the Security Information section on the Security tab:

Field/Check Box

Description

Session Time Out

The number of minutes before the user session will time out. System default and maximum allowed is 15 minutes.

Strong Password

If selected, the credit union has implemented strong passwords. Portico require that all user passwords meet the password requirements.

Password Life

The number of days before the user password must be changed. System default and maximum allowed is 90 days.

With Fiserv Single Sign-In, Portico requires that users change their passwords every 60 days.

Min Password Life

The minimum number of hours required before a password can be changed.

Max Failed Attempts

The maximum number of failed password attempts allowed. Required system default is 5 attempts. This number cannot be changed.

Close Other Active Session at Logon

If selected, users will be given the option to close an active session when attempting to log into another session.

If this checkbox is selected and a user attempts to log into a new session while logged into an existing session, a message will appear. The user can select Yes to close the existing session and log into a new session.

If this checkbox is not selected and a user attempts to log into a new session while logged into an existing session, a message will appear. The user must select OK, and then log out of the active session.

The Close Other Active Session at Logon checkbox is automatically be selected. To clear the checkbox, you must be a member of the Portico – Profiles – Administrator security group or a credit union-defined security group with the Portico – System – Credit Union Profile – Maintain security permission.

Employee Lockout

If selected, the credit union uses Employee Lockout. Employee lockout limits online access to employee accounts to authorized individuals. This option is used with the Account Restriction field on the Contact Information tab. Activity on employee accounts will print on the 036 and 445 Reports.

Must be selected if users belong to the Employee Security - User Has No Access security group or a credit union-defined security group containing the EmplSecurity - User Can Not View Any Employee Accounts permission.

(Portico Host: 901 Transaction - EMP LOCKOUTS field)

Enhanced Employee Security

If selected, the credit union supports employee and restricted account security.

Enhanced Override

If selected, the credit union can monitor all transactions that are overridden by tracking which employee performed the override (via teller number) and which employee approved/authorized the override (via employee name). You can define override groups in Portico to help you enforce credit union policies regarding which employees at the credit union are authorized to approve an override. When defining an override group, you can also prioritize the list of employees authorized to approve overrides. Once override groups are defined, each employee/user must be associated to one or more override groups.

Remote Override

If selected, the credit union uses Remote Override to let users send an override request to a remote user for approval without leaving their workstation or having someone personally review the transaction at their workstation. All the information needed to approve or deny the request, including a screen capture of the transaction, is sent to the remote user. The assigned users within an override group have the authority to remotely override a transaction for another user.

Remote Override Time Out

The number of seconds before a remote override request will timeout.

Teller Override

Indicates if the teller override authority option has been selected by the credit union. This option allows non-90 series teller IDs to perform transactions normally requiring a 90 series teller ID. Each non-90 series teller ID must have a teller-defined override code (Override Code field) and the types of transactions allowed (Authority group box) specified on the Teller Information window. The valid options are:

N - Teller override authority option not selected

Y - Teller override authority option selected. Override codes are displayed.

X - Teller override authority option selected. Override codes are not displayed on selected screens.

(Portico Host: 901 Transaction - TLR OVERRIDE field)

Password Requirements

A user must change their Portico password every 90 days. The maximum failed attempts is 5. Portico requires that all user passwords meet the following criteria:

  • Minimum of 9 characters.
  • Maximum of 30 characters.
  • Must use both upper and lower case characters.
  • Must use both alpha and numeric characters.
  • Must contain at least one of the following: ! @ # $ % ^ & * ( ) _ + -
  • Cannot contain more than two repeating characters consecutively.
  • Cannot contain your Portico login ID.
  • Cannot contain the word Fiserv or any upper and lower case combination of Fiserv.
  • Cannot contain the word password.
  • Same password cannot be reused within the last 14 password changes.

Portico sends password expiration reminders to the user email address defined on the User - Update window beginning ten days prior to the user’s password expiration. Portico sends a reminder email daily until the user changes their password or until the user ID becomes inactive.

The following fields and checkboxes appear in the Fiserv Single Sign-In Options + Applications section on the Security tab:

Field/Check Box

Description

Fiserv Single Sign-In

If selected, your credit union uses Fiserv Single Sign-In to sign in Portico and other applications.

You must be a member of the Portico – Profiles – Administrator security group or a credit union-defined security group with the Portico - System - Fiserv Single Sign-in – Maintain security permission to turn on Fiserv Single Sign-In.

Mandatory to Enroll after

The date when users must enroll in Fiserv Single Sign-In. Beginning four days before the mandatory enrollment date, the Remind Later button no longer appears on the Fiserv Single Sign-In dialog box. If you select Cancel or close the dialog box to bypass the required enrollment, an error message appears indicating that you must complete the Fiserv Single Sign-In Enrollment process to sign in Portico.

Additional Comments

Contains additional comments regarding Fiserv Single Sign-In.

PorticoUsers

Displays the applications you can access using your single sign-in credentials. The selected check boxes indicate applications in use by your credit union and enabled for Fiserv Single Sign-In.

Client Central

Select this checkbox to enable single sign-in access to Client Central from the Member Services menu on the Portico Explorer Bar in today's Portico and on the Explore menu in the Portico User Experience. Custom links to Client Central manually added by your credit union will not honor the single sign-in.

Refer to the following Knowledge article for more information: KB0236886 - Portico - How to set up Portico to Client Central Single Sign In

SSO System Identifier

The system identifier you received from your card services representative.

Nautilus Essentials

Select this checkbox to enable single sign-in access to Nautilus Essentials.

Reporting Analytics

Select this checkbox to enable single sign-in access to Reporting Analytics from the Resources menu on the Portico Explorer Bar in today's Portico and on the Explore menu in the Portico User Experience.

Refer to the following Knowledge article for more information: KB0235991 - Portico - How to set up Portico to Reporting Analytics Single Sign In

Superior IRA

Select this checkbox to enable single sign-in access to Superior IRA from the Resources menu on the Portico Explorer Bar in today's Portico and on the Explore menu in the Portico User Experience.

Refer to the following Knowledge article for more information: KB0235994 - Portico - How to set up Portico to Superior IRA Single Sign In

Org ID

The Org ID you received from your Superior IRA representative.

Message Pay

Select this checkbox to enable single sign-in access to MessagePay from the Resources menu on the Portico Explorer Bar in today's Portico and on the Explore menu in the Portico User Experience.

Refer to the following Knowledge article for more information: KB0235984 - Portico - How to set up Portico to MessagePay Single Sign In

Authentication URL

The URL you received from your MessagePay representative.

ReSelect Save to save your changes.