Access Management FAQ
The following responses are supported solutions to frequently asked questions (FAQ) on access to the OneTrust platform. The OneTrust team continuously monitors these inquiries and will make additional FAQ available as they are identified.
OneTrust Platform Access
How long do I have to sign up after receiving a registration email?
The link is valid for 7 days.
How long do I have to sign up after receiving a re-sent registration email?
The link is valid for 7 days.
How long will my authorization (bearer) token last?
Authorization tokens are valid for 5 minutes.
Why was I logged out?
All users will be automatically logged out after remaining idle for longer than the configured Session Timeout Duration. By default, the Session Timeout Duration is set to 20 minutes, but can be changed on the Session Settings screen within Global Settings.
I refreshed my window and was logged out. What happened?
After remaining idle for the amount of time configured for the Session Timeout Duration, you will be signed out of OneTrust services. When you refresh your browser or attempt to navigate to a new screen or modal, you will be redirected to the Login screen.
Password Policies
What is OneTrust's password policy?
You can find OneTrust's password policy by clicking the User icon in the Global Header and selecting User Preferences. The following parameters must be met:
-
Must contain at least one uppercase letter.
-
Must contain at least one lowercase letter.
-
Must contain at least one number.
-
Must be at least 8 characters long.
-
Passwords must match.
-
Must be different than email.
-
Must not contain first name or last name of the user.
-
Must contain at least one special character.
What is my default password if I am logging in to the OneTrust platform for the first time?
You will be required to set your password immediately once you click the Login link within your Welcome email to access the platform for the first time.
Will I get locked out if I enter an incorrect password after a certain number of attempts?
You will have 5 attempts to enter the correct password. After 5 attempts, you will be locked out for 10 minutes.
What should I do if I forgot my password?
You can click the Forgot Your Password link on the Login screen to receive an email with instructions on how to reset your password. If you are unable to reset your password using the Forgot Your Password link, you can contact a Site Admin within the root organization to use the Reset Password option.
Please note that the Forgot Your Password link will only send an email if the user has previously logged in to the OneTrust platform. If the user has never logged in, a Site Admin can resend the initial Welcome Email by clicking the Context Menu icon corresponding to the given user on the Users list screen and selecting either the Resend Invite or Reset Password options, as detailed below:
-
Select the Resend Invite option and click the Send button on the Resend Invite modal.
-
Select the Reset Password option and click the Reset password button on the Reset password modal. For more information, see Resetting User Passwords.
Does using Forgot Your Password require additional validation?
Forgot Your Password requires CAPTCHA validation in order to submit the request to reset your password. Once validated, an email will be sent to the provided email address with a link to reset your password.
When my password expires, can I reset it to a previously used password?
Your password cannot be reset to any of the last 10 passwords used to access the platform.
How long do I have to reset my password?
The link in the Forgot Password email is valid for 1 hour.
How often do I need to reset my password?
Your password will expire after 90 days and should be reset prior to expiration.
What are the password reset parameters?
OneTrust's password policy will also apply for passwords being reset.
Does OneTrust encrypt user passwords?
Passwords are hashed, not encrypted. Database encryption will then apply.