Failed Logins & Account Lockout

The account lockout functionality adds an additional layer of security to both PensionPro and PlanSponsorLink. This feature prevents unauthorized users from making unlimited sign-in attempts by locking the user's account after repeated failures.

 

Article Contents

 

 


 

Account Lockout Overview

 

Both PensionPro and PlanSponsorLink allow a user five sign-in attempts. After five failed attempts in a row, a temporarily lock will be placed on the account, preventing further sign-in attempts for a period of 2 hours.

 

When this lock occurs, the application will send the affected user an email notification informing them of the lockout. This email includes the impacted username and the IP address where the sign-in attempts originated.

 

Note: On PensionPro's Business and Enterprise tiers, this email notification will also be CC'd to any Employees assigned the System Administrator Security Role. This can help expedite any needed security response and/or troubleshooting efforts.

 

Further attempts can be made once the lockout has ended. Alternatively, password reset can be performed during the lockout period; refer to one of the following articles:

 

 


 

PlanSponsorLink Login Lockout Preferences

 

When a Plan Sponsor's account is temporarily locked, they will receive a notification email informing them of the lock. The contents of this email can be customized by the firm:

 

  1. Navigate to Maintenance > Preferences > PlanSponsorLink Subdomains. The corresponding grid opens in a new tab.
  2. Double-click the desired subdomain in the list to open it at the Preferences view.
  3. Set the Login Locked Email Body and Login Locked Email Subject preferences as desired.