NATIONAL INSURANCE CRIME BUREAU - Laserfiche WebLink

11 • Authorized Users may not share their IDs and passwords with anyone. • Account will lock out a user after three failed password entries. • Account or password reset requires the authentication of the owner of the account through knowledge-based security questions. • Passwords are required to be changed once every 90 days. The Authorized User will receive a reminder before password expiration and be prompted to change his or her password on the 90th day. 4 . IDs and Passwords: Federated Users (SSO) ISO ClaimSearch has SSO (single sign-on) solutions for most of its offerings that can include full SAML (Security Assertion Markup Language) integration with our ISO ClaimSearch Participating Organizations that prefer this configuration option. Through the SSO solution, the Authorized User will have the ability to log in to ISO ClaimSearch only through the Participating Organization’s network using Participating Organization–issued credentials. When the Participating Organization that has opted for full integration deletes an authorized credential, the corresponding ISO ClaimSearch credential is simultaneously removed for most of its offerings. To take advantage of this service, please contact njsupport@iso.com. Participating Organizations using SSO must comply with the following: • All workstations using ISO ClaimSearch must time-out after no longer than 30 minutes of inactivity. • Passwords must be at least eight characters in length and include a number and a letter. • Each ID must be unique and assigned to only one Authorized User. • IDs and passwords must not be shared. • Specifications are provided by the ISO ClaimSearch integration team. 5 . User Account Setup (User Profile) ISO ClaimSearch requires all Authorized Users to complete an account setup profile that includes: • reading, understanding, and agreeing to comply with the requirements within the ISO ClaimSearch Privacy and Security Policies and other terms of use (agreement may vary depending on a user’s type) • providing and confirming Participating Organization’s e-mail address at Participating Organization or as otherwise authorized by Participating Organization • responses to knowledge-based security questions used to validate identity, when needed 6 . Restrict Authorized Users to Range of Internet (IP) Addresses ISO strongly encourages ISO ClaimSearch Participating Organizations to apply their unique Internet protocol (IP) ranges to allow Authorized Users to access ISO ClaimSearch only through the Participating Organization’s network or proxy server. This will provide additional protection to reduce the risk of unauthorized use of ISO ClaimSearch. To take advantage of this added layer of protection, please contact info.claimsearch@iso.com. Docusign Envelope ID: 329281D2-142C-8B83-837A-7CD218C257C4