What are the triggers that automatic disable SOAR accounts?

Hello, 

I have just found a number of collaborators accounts on our SOAR platform been disabled. Since nobody from my team did this, I suppose some kind of conditions were matched, like long absence or similar.

Is there a way to know what these conditions are or eventually modify them?

 

Thanks

0 3 105
3 REPLIES 3

SOAR accounts are automatically disabled when the password expires after not being changed for 90 days. SOAR users should receive notifications about password expiration prior to this taking place.

In addition to what @cmorris mentioned, it could be failed attempts to log in, which also led to a disabled account. 

I see! Thanks for your replies everyone!

A