To help thwart unauthorized downloads of ID files from a vault, require authorization for ID downloads.

Procedure

1. Open the Security Settings document used in users' policies in edit mode and click the ID Vault tab.

2. Edit the following fields and then save the document.

Table 1. ID Vault tab fields

Field	Description
Allow automatic ID downloads	Select No. (Default=Yes).
Allow ID downloads for	Specify a period of time in days and hours within which users are allowed to download new copies of IDs to recover from a forgotten password or missing local ID file. Note: Specify the number of downloads allowed on a per-user basis when resetting passwords or by using the Set ID Download Count tool.
ID download authorization failure message	Type the text to display to users who have exceeded the download time limit or download count limit. For example: Please call 123-4567 to authorize the download of your ID from the ID vault.

Note: When SAML Notes federated login or SAML Web federated login is the authentication method used to extract Notes ID files from the ID vault, the value for the ID Vault policy settingAllow automatic ID downloads is ignored because SAML authentication requires unrestricted download access to ID files from the vault.

If the Allow password authentication with the ID vault setting is enabled for federated login, theAllow automatic ID downloads setting is still used for the password authentication. Allow password authentication with the ID vault setting is found in the Federated Login -> Additional settings for Federated Login (Notes or Web) section of the Security Settings policy document.

Related concepts
Authorization for ID downloads

Related tasks
Enabling Web federated login
Enabling Notes federated login
Resetting the password on an ID in a vault
Specifying the number of ID downloads allowed for a user
Assigning password reset authority
Creating and configuring an ID vault