IDP
Configuring General Authentication Settings
The General section provides two key areas for setting up authentication in a Construct app:
- Settings
- Grant Types
Settings
The Settings tab of General section defines the rules for user authentication.

| Option | Description |
|---|---|
| Access Token Validity | Sets how long an access token remains valid. |
| Refresh Token Validity | Determines the validity period for refresh tokens. |
| 'Remember Me' Token Validity | Controls session duration when the "Remember Me" option is enabled. |
| Max Wrong Attempts Before Lock | Defines the number of failed login attempts allowed before an account is locked. |
| Account Lock Duration | Specifies how long an account remains locked after exceeding the allowed failed attempts. |
Steps to Configure Settings
- Go to Core Services → Authentication .
- On the landing page, the General tab will be open by default.
- Click the Edit icon in the Settings table.
- A pop-up window will appear.
- Enter your preferred values for each field.
- Click Save to apply the changes.
Organization
To enable organizations, go to OS > IDP > Settings > Organization.
Click on the. Mulit-Organization Environment switch to enable it. Once it is enabled, it cannot be disabled.
Once enabled, you will see three options
- Allow creation from OS - Automated provisioning via Global Cloud API.
- Allow creation from Construct Signup - Self-service creation during construct user signup.
- Allow creation from Construct - Manual provisioning via construct admin dashboard.