Settings

Guide Overview

Summary:
The Settings page in your ActiveProspect account centralizes core account configuration, security, and system information, including audit history, technical details, timezone configuration, and high-level account security controls such as Two-Factor Authentication (2FA).

Learning Objectives:

• Understand what configuration options are available in Settings
• Learn how to review account activity and technical details
• Understand how Two-Factor Authentication (2FA) applies at the account and user level

Quick Start Workflow

1. Log in to your ActiveProspect account
2. Navigate to Settings
3. Review Audit Log and Technical Details
4. Confirm Account Timezone
5. Review Two-Factor Authentication (2FA) requirements

Step-by-Step Instructions

Step 1. Access Settings

• Goal: Open the central configuration area for your account

Instructions:

1. Log in to your ActiveProspect account at account.activeprospect.com.
2. From the dashboard, click Settings in the main navigation menu.

Expected Result:
The Settings page opens, displaying configuration sections for Audit Log, Technical Details, and Account Timezone.

Step 2. Review the Audit Log

• Goal: Monitor configuration and user activity

Instructions:

1. Select the Audit Log tab.
2. Review the chronological list of entries showing date, time, user, and action taken.

Expected Result:
You see a complete, time-stamped record of changes made within the account.

Step 3. Review Technical Details

• Goal: Access system-level configuration information

Instructions:

1. Click the Technical Details tab.
2. Review system information such as API keys, integration endpoints, and data retention details.

Expected Result:
All technical system information is visible and up to date.

Step 4. Configure Account Timezone

• Goal: Ensure accurate timestamps across logs and reports

Instructions:

1. Locate the Account Timezone field.
2. Select your local timezone from the dropdown.
3. Click Save. The Save button is located towards the bottom right of the Technical Settings.

Expected Result:
The account timezone updates and applies across logs and reporting.

Step 5. Understand Two-Factor Authentication (2FA)

• Goal: Understand how 2FA enhances account security

Context:
Two-Factor Authentication (2FA) adds an additional security layer by requiring users to provide both a password and a one-time verification code when logging in.

High-Level Overview:

• 2FA requires “something you know” (your password) and “something you have” (a one-time code).
• After entering a username and password, users must provide a one-time code before gaining access.
• 2FA can be enabled on a per-user basis or required across the entire account.

2FA Methods Supported:

• SMS: A one-time password sent via text message
• Authenticator App (OTP): A one-time password generated by an app such as Google Authenticator

Account-Level Considerations:

• Accounts may be configured to require 2FA for all users.
• When required, users who have not yet enabled 2FA are prompted to do so at their next login.
• Administrators may temporarily disable the account-level requirement to allow new users to complete setup, though this is generally recommended only as a short-term measure.

Expected Result:
You understand how 2FA impacts user login behavior and account security settings.

Validate Your Setup

To confirm your Settings configuration is correct:

• Verify recent changes appear in the Audit Log
• Confirm API and system information in Technical Details
• Ensure timestamps reflect the correct Account Timezone
• Confirm whether 2FA is required at the account level and whether users are successfully logging in with 2FA enabled

Troubleshooting

Frequently Asked Questions (FAQ)

Q: Where can I see all configuration changes made to my account?
A: The Audit Log in Settings provides a complete, time-stamped history of all changes.

Q: Where do users manage their own 2FA settings?
A: Users enable or disable 2FA from Update My Info in account management.

Q: What happens if a user loses access to their 2FA device?
A: ActiveProspect Support can manually verify the user and reset 2FA access.

Q: Can 2FA be required for all users?
A: Yes. When enabled at the account level, all users are prompted to configure 2FA on their next login.

Glossary

• audit-log.png600 KB