Five wrong guesses, and the door shuts
Repeated wrong passwords lock the account. A reused session token ends the session outright. Office users can be asked for an authenticator code, and the office can sign a rep’s phone out remotely.
- Wrong passwords
- 5
- Within
- 10 minutes
- Account
- Locked
- For
- 15 minutes
Refused · No sign-in until the lock expires, even with the right password
How sign-in is protected
Password
Five wrong passwords in ten minutes lock the account for fifteen.
Second step
For an office user who must use it, an authenticator-app code follows the password.
One live session
A new sign-in ends the user’s earlier sessions.
Stolen token caught
If a session token that was already replaced comes back, the whole session ends.
Details that matter
Backup codes
Setting up two-step sign-in gives ten backup codes for a lost phone, and an admin can reset it.
Rep devices from the office
The office sees each rep’s signed-in device and can sign it out.
Access cut at once
Deactivating a user or switching on two-step sign-in ends their open sessions straight away.
Questions buyers ask
Can field reps use two-step sign-in?
No. Two-step sign-in is for office users. A rep’s device is controlled from the office instead.
Do you support single sign-on?
Not yet. Sign-in with Microsoft, Google or SAML is not available.
What happens if someone copies a session token?
When a replaced token is used again, Axon Suite ends that session for everyone holding it, and the user signs in again.