Blue Relay has an optional setting which can be configured to automatically lock inactive user accounts. By default, this setting is turned off.
When user accounts get automatically locked, all Admin users receive an email with the subject "Notice: Auto Locked Users" listing all users who have been automatically locked.
The following system configuration settings can be used for turning on and fine-tuning this feature:
security.enableAutoLockFeature = false
This setting turns on or off the auto-lock feature. By default, this is set to false. To turn on auto-locking for inactive accounts, set the value to true.
security.autoLockCheckInterval = 1 week
This determines how often Blue Relay will check and lock inactive accounts. By default, the setting is set to 1 week, so the check will be performed once per week. You can adjust this to be more or less frequent, for example: 1 day or 4 weeks.
Please note: the smallest interval you can chose is 1 hour. If you select anything shorter than 1 hour (for example, 5 minutes), the check will still run once every hour.
security.autoLockPeriodOfInactivity = 3 years ago
This setting determines how long an account can be inactive before it will be automatically locked. By default, the setting is 3 years ago so any users who haven't logged in to Blue Relay at all in the past 3 years would be locked. You can adjust this setting to different, such as 3 months ago or 1 year ago.
For more information on locking/unlocking User accounts, please refer to: Lock or Unlock a User