Login

Participants can login using their email and password.
- Participants have up to 10 retries after which their account will be locked (preventing login attempts for 10 minutes). If their account has been locked previously within 24 hours, a failed login results in an additional 24 hour lock out.
One-time password (OTP) challenge can be enabled, with a random 4-digit code received via email.
- The code is valid for 10 minutes
- The same email/password failed login account lock policy applies to OTP login attempts
Participants can also login via OIDC if it has been enabled
There is a 'Forgot Password' password reset button that emails a link to the participant
- This link includes a token that expires after 15 minutes.