Release notes 2025 | Access Control

Improvement

New account recovery flow: when an administrator reactivates a deactivated user, the system automatically sends an email with instructions to reset the password and regain access. The user has up to 48 hours to complete the process. During this period, the account status remains Pending until completion.

New user interface

We introduced a completely redesigned interface aligned with the platform’s look and feel, providing a more seamless and integrated experience while retaining existing functionalities.

Security improvements

Inactive user

• Automatic deactivation of inactive users: accounts without access for 90 days are automatically disabled, with reactivation performed by users with edit permissions.

Password policy

• New password policy: the minimum length is now 12 characters, maintaining complexity requirements (number, uppercase letter, lowercase letter, and special character). Existing passwords remain valid until changed.
• Password history: reuse of the last four passwords is not allowed.
• Threat protection: logins identified as threats are automatically blocked.

Bug fixed

We fixed a UI issue that impacted the correct rendering of the list of roles assigned to users with many policies in the Firefox browser.

PCI compliance requirement

Logged-in users who remain inactive for 15 minutes are automatically signed out, in accordance with PCI standards.