Here you determine whether two-factor authentication is mandatory for different roles, how long you want to retain data, and whether you give advisors permission to log in as users.
Two-factor authentication (2FA)
By setting up two-factor authentication (2FA), you add an extra layer of security to the organisation. As organisation administrator, you can choose for whom this is mandatory. If it is not mandatory, users can always choose to use 2FA themselves.
Deactivation period for advisors
The period of inactivity after which advisors are deactivated. The advisors’ data is still retained. By reactivating an advisor, the account can be used again.
Deactivation period for candidates
The period of inactivity after which participants are deactivated. The candidates’ data is still retained. By reactivating a candidate, the account can be used again.
Retention period for personal data
Under the General Data Protection Regulation (GDPR), it is established that personal data may not be retained longer than necessary. To comply with this, inactive candidates, advisors and contact persons are automatically deleted based on the chosen retention period. This retention period is also applied to administered assessments and generated reports. The maximum retention period is two years.
May log in as another user
If you enable this option, advisors with ‘log in as’ rights can log in to the (candidate) accounts they manage.
Allow Ixly support
If you enable this option, you give Ixly helpdesk staff the ability to view your users’ accounts in order to resolve issues reported to the helpdesk.
Passwordless login link
You can allow users to request a new link when using passwordless login links, if an email address is known in the system. A passwordless login link is in most cases valid for a limited time; candidates can request a new one-time link in this way.
