IDP
Configuring General Authentication Settings
The General section provides two key areas for setting up authentication in a Construct app:
- Settings
- Grant Types
Settings
The Settings tab of General section defines the rules for user authentication.

| Option | Description |
|---|---|
| Access Token Validity | Sets how long an access token remains valid. |
| Refresh Token Validity | Determines the validity period for refresh tokens. |
| 'Remember Me' Token Validity | Controls session duration when the "Remember Me" option is enabled. |
| Max Wrong Attempts Before Lock | Defines the number of failed login attempts allowed before an account is locked. |
| Account Lock Duration | Specifies how long an account remains locked after exceeding the allowed failed attempts. |
Steps to Configure Settings
- Go to Core Services → Authentication .
- On the landing page, the General tab will be open by default.
- Click the Edit icon in the Settings table.
- A pop-up window will appear.
- Enter your preferred values for each field.
- Click Save to apply the changes.