PIN policy

This section is located on the Security Options page under the General tab.

In the PIN policy section, you can create a PIN policy for users.

Screenshot 2026-04-29 131801.png

The minimal PIN length property can't be disabled, and the minimum PIN length can't be less than 4 characters.

Property Do not allow sequential PIN

If enabled, PINs consisting of sequential characters or repeated patterns, such as 1234, 4321, 1111, abcd, AAAA, or ABCD, are automatically disallowed. However, the policy does allow mixed case patterns, such as AbCd, aaAA as these are considered to be more complex and less predictable.

Scope of the policy

The policy applies to all operations where a user's PIN is created or changed:

  • administrator edits the user record

  • user edits their own profile

  • user account is created or updated via the API

  • Via a trigger rule. For example, when the user submits their first print job to Dispatcher ParagonCloud.

If the PIN doesn't meet the policy requirements, the operation will be rejected.  Errors are displayed at the top of the UI form. When using the API, errors are recorded in the log file.

Existing users

When an administrator changes the PIN policy, it doesn't apply to the current PINs of existing users. Therefore, even after the policy has been changed, the database may still contain users with PINs that do not comply with the policy. 

PIN expiration

PIN expiration specifies how many hours the PIN is valid. After the specified time the PIN expires and is deleted. Enabling PIN expiration applies only to newly created PINs.

PIN expiration notification

The administrator can configure how many hours in advance of the PIN’s expiration the system sends an email notification to the user. When this is set to 0 or PIN expiration is set to 0 the notifications will not be sent.

  1. In Messaging configuration, select which of your messaging configurations will be used to send emails.

  2. In PIN expiration notification email template, select which of existing emails templates will be used for PIN expiration notification. It uses predefined template by default, which can be customized by, for example, adding terms of service. It is also possible to create custom template and use it.
    There are several variables usable for this template:

    1. {{pinExpiration}} - Time when PIN expires for the user

    2. {{username}} - Username of the user

    3. {{customer-name}} - Name of the company (e.g. Acme corporation)