Security settings
The Configuration → Security group in the Admin console controls how everyone in your organisation signs in, and who is signed in right now.
What's in this group
| Page | What it does |
|---|---|
| Active Sessions | See who is signed in to this business unit right now, and sign any device out. |
| Session Timeout | Lock or sign out users after a period of inactivity, and allow PIN sign-in to resume a locked session. |
| Session History | Every sign-in and failed attempt for the last year, with how each session ended. |
| Multi-Factor Auth | Require an authenticator app at sign-in, and reset a user's MFA. |
| Tally Connector | Issue and manage the desktop agent that links Bizconnekt to your Tally. |
Active sessions
Configuration → Security → Active Sessions lists every live sign-in for the users of the business unit you are working in — the user, their device and browser, where they signed in from (IP address), and when they were last active. Your own session is marked Current Session.
- Revoke signs that device out.
- Revoke All Other Sessions signs out every session except yours — useful after a lost laptop or a staff change.
Only tenant administrators can view this page.
Multi-factor authentication
Configuration → Security → Multi-Factor Auth manages authenticator-app MFA:
- Require MFA for all users — when the organisation-wide requirement is on, every user must set up MFA at their next sign-in. Turning it off again doesn't remove MFA from users who have already set it up.
- The User MFA Status table shows each user as Enrolled or Not Enrolled, with a per-user Reset MFA action for lost devices — the user sets up MFA again at their next sign-in.
Users sign in with their password first, then the 6-digit code from their authenticator app; backup codes cover a lost device at sign-in time.
Sign-in PIN
The Sign-in PIN setting now lives on the Session Timeout page, because the PIN is what users enter to resume a session the timeout has locked.