Enterprise (global) Team policies
Team Policies allow you to enforce security rules for all users in a particular Team; for example, requiring use of two-step login.
Team Policies can be set by a Team Admin or Owner.
Tip
Set Team Policies prior to inviting users to your Team.
Caution
Some policies will remove non-compliant users when enabled, and some are not retroactively enforceable.
To access Enterprise Team policies:
Log in to Bravura Safe via the web interface.
Click Teams.
From the Team drop-down, select the Enterprise Team.
Click the Settings tab.
Select Policies from the SETTINGS menu.
Note
Only the Password generator policy can be set for regular Teams. Though other policies appear under Settings for regular Teams, they can only be set at the enterprise level.
Click on an Enterprise Team policy to configure. See below for details:
This policy refers to two-step login (2FA) that can be set up for individual Bravura Safe accounts and will require users who are not an owner/admin to enable and use a second authentication factor to log in.
If you are using SSO and your IdP includes 2FA, this policy is not required.
Warning
Note the warning in the image below. When this policy is turned on, existing users without a two-step login method enabled will be removed from the Team and will have to be re-invited.
See also
If this policy is updated, existing non-compliant users must adhere to the new policy requirements at their next master password change.
Warning
Turning OFF the Master password reset policy on the Enterprise Team, means users that forget their master password can only recover the password using emergency access if they have that method configured . Otherwise, they will need to delete their Bravura Safe account and be onboarded by the Enterprise Team administrator again. See I forgot my master password for details.
For self-enrollment, see Enroll in password reset.
Note
This policy is set per Team. The enterprise Team policy does not supercede that of a regular Team policy.
Warning
When this policy is turned on, any existing Team item passwords that do not comply will not be changed or removed.
If turned on, any existing items in users' individual safes will remain there.
This policy, when turned on, allows you to streamline user login by skipping the personal two-step login authentication (e.g. Authenticator app) if they are logging in via SSO.
Warning
Bravura Security recommends that you only use this policy if multi-factor authentication (MFA) is already enforced through your Identity Provider (IdP).
This policy, when enabled, turns on auto-fill on page load for browser extensions for all existing and new members of the Team.
Note
Members can turn off or modify auto-fill on page load behavior for their browser extension.
Select Turn on.
Click Save.