Set Up a Security Profile

Complete each of these tasks in the order given.

Create a Security Profile

Required permissions: Security Profiles Create

  1. Use one of the following methods to create the security profile and give it a name: 

    • To create a new blank security profile:

      Screenshot of the security profile creation Name & Information page, configured for a blank security profile
      1. Click the app selector and select Admin.
      2. Go to Security Profiles.

      3. Click Create New.

      4. Enter a unique Name for the security profile.

      5. Enter a Description if you want one.

      6. For Create, select a blank Security Profile.

    • To quickly create a new security profile that copies an existing one:

      Screenshot of the security profile creation Name & Information page, configured for a copy of a system security profile
      1. Click the app selector and select Admin.
      2. Go to Security Profiles.

      3. Open the security profile you want to copy.

      4. Click Copy.

      5. Enter a unique Name for the security profile.

      6. Enter a Description if you want one.

  2. Click Next.

  3. Enable permissions for each product and feature you want users to have. Some permissions, like User Settings and Security, are grouped. To see the permissions inside the groups, click Individual next to the group name.

  4. Click Next.

  5. Enable permissions for each report you want users to have.

  6. Click Next.

  7. Restrict data access by CampaignsClosed A grouping of skills used to run reports., Teams, Assignable Profiles, Groups, and Business UnitsClosed High-level organizational grouping used to manage technical support, billing, and global settings for your CXone environment. For each data type, select whether you want users to access All & Future data of that type, None, or Custom.

  8. If you chose Custom for a data type, use the pop-up window to specify which entities of that data type the users can access. Click Done.

    New campaigns, teams, security profiles, groups, and business units aren't automatically added to custom lists when they're created. You must update the custom list if you want users to access the new data.

  9. Click Next.
  10. Click Create Security Profile.

Configure a Login Authenticator

Required permissions: Login Authenticator Create

  1. Click the app selector and select Admin.
  2. Go to Login Authenticator.

  3. Click Create New.

  4. Enter a unique Name for the login authenticator.

  5. Enter a Description if you want one.

  6. Select System as the Authentication Type.

    Field

    Details
    System The login authenticator uses the built-in login process of CXone. It doesn't authenticate using an external single sign-on (SSO) identity provider.
    SAML SAML 2.0 allows you to set up single sign-on through an external identity provider. CXone supports multiple instances of SAML 2.0. You can assign different instances to different users.
  7. Set up your password complexity.

    Each user's password is checked against a repository of commonly used passwords. If their password matches one of the commonly used passwords, they will be forced to create a new password. Some of the passwords that are rejected include:

    • Any password that includes the word "password." For example, Password@1234.

    • Any password that includes the user's email address, username, first name, last name, or system name.

    Passwords are checked against this repository whenever:

    • A new user is activated.

    • A user's password expires.

    • A user resets their password.

    FieldDetails
    Require Lower Case (a-z)Requires users to use at least one lower-case letter in their passwords.
    Require Upper Case (A-Z)Requires users to use at least one upper-case letter in their passwords.
    Require Numeric (0-9)Requires users to use at least one number in their passwords.
    Require Non-alphanumeric (!,@,#,etc.)Requires users to use at least one non-alphanumeric character in their passwords.

  8. If you want to enable multi-factor authentication, select Require Multi-Factor Authentication. Set your MFA Type as HOTP and TOTP.

    Field Details
    Require Multi-factor Authentication

    Requires users to enter a multi-factor authentication (MFA) token in addition to their password to log in to CXone. An MFA token is a one-time password generated by a hardware token or virtual MFA device (for example, an app like Google Authenticator) that you provide. When you enable MFA, users with the affected profile must configure an MFA secret key the next time they log in.

    You should not enable MFA for the master administrator in your organization. If the device or secret is lost, the only way to reset the MFA secret is to file a ticket with NICE CXone.

    MFA Type Specifies whether you want to enable TOTP or HOTP MFA.

  9. Set your password policy.

    Field Details
    Password Length Enter the minimum number of total characters users must include in their passwords. For example, if you enter12, users must include at least 12 total characters in every password. The characters required in the Password Complexity settings count towards the total character count. You can set the password length to any number between 12 and 24.
    Enable Password Age Enables a text box where you can enter the maximum number of days a user can keep a password. After the specified number of days, the user must change their password. You can set the password age anywhere from 14 to 365 days.
    Enable Password History Enter the number of unique passwords a user must set before they can reuse an old one. You can set the password history anywhere from 4 to 50. For example, if you enter 10, users assigned to the login authenticator cannot use any of their last 10 passwords as their new password.

  10. Click Create Login Authenticator.

Assign Users to the Security Profile

Required permissions: Users Edit

A user in your contact center must have one security profile assigned to them. The CXone interface allows you to assign users to security profiles individually. Repeat these steps for each user, or you can update multiple users at once using the user file upload feature.

Screenshot of the user profile edit form with the security profile drop-down open
  1. Click the app selector and select Admin.
  2. Go to Users.

  3. Open the user you want to edit.

  4. In the General tab, click Edit.

  5. In the Security section, use the Security Profile drop-down to select the security profile.

  6. Select a Login Authenticator.

  7. Click Done.