Previous Next JavaScript must be enabled to correctly display this content

## 3.4.7.3 Configuring Authentication Control Development Environment Settings

Use Authentication Control, Development Environment Settings to configure security settings for workspace administrator and workspace developer accounts.

To configure security settings for workspace administrator and workspace developer accounts:

1. Sign in to APEX Administration Services.
2. Click Manage Instance.
3. Under Instance Settings, click Security.
4. Authentication Control, Development Environment Settings:
   1. Username Validation Expression - Enter a regular expression to validate the usernames of developers and administrators. Enter `*` to bypass the validation. The following example validates that the username is an email address:

      `^[[:alnum:]._%-]+@[[:alnum:].-]+\.[[:alpha:]]{2,4}$`

   2. Require User Account Expiration and Locking - Applies to end user accounts created using the APEX account management interface. Options include:
      - Yes - EnablesAPEX user account expiration and locking features across all workspaces. This selection prevents the same feature from being disabled at the workspace-level.
      - No - Relinquishes control to each Workspace administrator.
   3. Maximum Login Failures Allowed - Enter an integer for the maximum number of consecutive unsuccessful authentication attempts allowed before a developer or administrator account is locked. If you do not specify a value in this field, the default value is 4.

      This setting applies to administrator and developer accounts. It does not apply to end user accounts. The value you enter is used as the default for the workspace-level Maximum Login Failures Allowed preference if the Workspace administrator does not specify a value. That preference is used for end-user accounts within the respective workspace.

   4. Account Password Lifetime (days) - Enter a number for the maximum number of days a developer or administrator account password may be used before the account expires. If you do not specify a value in this field, a default value is 45 days.

      This setting applies to accounts used to access the APEX administration and development environment only. It does not apply to end user accounts. The value you enter is used as the default workspace-level End User Account Lifetime preference which workspace administrators can change. The workspace-level preference applies to the accounts within that workspace.

   5. Current Workspace Authentication Scheme - Displays the current authentication scheme for Oracle APEX Administration Services and the Oracle APEX development environment.
   6. Data Reporter Authentication Scheme - Select an authentication scheme for Data Reporter. Supported authentication schemes include: SAML, Social Sign-In, or HTTP Header Variable. To learn more, see Configuring an Authentication Scheme for Data Reporter.
5. Click Apply Changes.

Parent topic: Configuring Authentication Controls for an Instance