.png){kind=logo}
Security (Practice Settings)
This area of the system allows you to set your security and compliance related settings:
Automatic sign out, two-factor authentication, login banner, inactive user lock out and record deletion, as well as single sign-on (SSO).
Read on for more information about each option, top to bottom
In this Article:
- Access Security Settings
- Security & Compliance Settings (auto sign out, require 2 factor, login banner, limit simultaneous logins)
- Inactive Users Lockout
- Records Deletion (who can delete docs & forms)
- Records Retention Compliance
- Single Sign On (SSO)
Access Security Settings
If you're not coming straight from our practice settings article, to access these settings:
- From any screen click (top right)
- Click Security (top tab)
- Find the last section titled Online Scheduling
- Click (top right) and re-enter your password
- The button will then turn to indicating you can make changes
- Review the options for each section below:
Security & Compliance Settings
timer Automatically sign users out
- If a client or provider is inactive past this time, they will be signed out automatically
- They will need to sign back in to resume use
security_update_good Require Two-Factor Authentication
computer Simultaneous Login Limit
- Limit how many devices / browsers a single user can be logged in with at the same time
- Logging in with more than the limit will result in the oldest sign in to be logged out
sms Login Banner
- A paragraph field type that you can enter
- If enabled, after signing in and before seeing the dashboard, this message will be displayed to both staff and clients shown here:
Inactive Users
update 90-Day Inactive User Lock-Out
Automatically inactivate staff and / or clients after 90 days of inactivity.
Staff or Clients having issues signing in after?
- To unlock staff: Click here
- To unlock clients: Unlock them from their client profile via the right hand menu
Records Deletion
Future updates to its capability will include additional data types, such as progress notes and treatment plan entries.
Enabling is on a permissions basis and you can enable it for:
- Managers
- Records Custodians
- Supervisors
- Therapists
Records Retention Compliance
This will be used in our future update with deleting clinical notes (from the client profile records tab).
Set a yearly threshold where client data will automatically be eligible for redaction/removal after this many years. It will be reviewable on a report.
We will never automatically delete any records from the system.
Range:
- 2 - 15 years
Single Sign On (SSO)
You can use your own OpenID Connect provider for staff to sign in to TherapyAppointment.
- To do so, check off the box:
- Review the prompt:
- Click
- Follow the instructions from top to bottom (screenshot below) to configure
- Click (bottom right) when done