Default Verification Process

The verifications performed by the Cúram login module during default authentication are:

• username and password.
• account and/or password expiry.
• username synchronization with security cache.
• break-in detection, e.g. upper limit on password entry attempts, incorrect usernames, password change failures.
• day and time access restrictions - day of the week and time range within the day.

The authentication and authorization of usernames is case sensitive by default, however it is possible to disable case sensitive authentication. If duplicate case insensitive usernames exist (e.g. caseworker, CaseWorker), authentication will fail due to an ambiguous username. Changing the Case-Sensitivity of the Username should be referenced for further details on this.