Minimize external user registration link expiration duration
Manage the number of days that a registration link can be accessed.
If the sn_ext_usr_reg.Reg_link_expiration_days system property is not set to the recommended value of 3, then a registration link could be used by someone other than the intended user if the link is discovered later in time.
Ensure that the property sn_ext_usr_reg.Reg_link_expiration_days is set to 3 or less.
More information
| Attribute | Description |
|---|---|
| Configuration name | sn_ext_usr_reg.Reg_link_expiration_days |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Integer |
| Recommended value | 3 |
| Default value | <none> |
| Fallback value | 3 |
| Category | Authentication |
| Security risk | - Severity score: Medium - CVSS score: 6.6 - Security risk details: Longer expiration windows weaken account provisioning security and create opportunities for unauthorized account creation or impersonation. |
| Dependencies and prerequisites | None |
Parent Topic:Authentication