Admin Base URL

Admin Base URL

For more information about setting these options, see Configure the base URL in the Stores and Purchase Experience Guide.

FieldScopeDescription
Use Custom Admin URLGlobalDetermines if a custom URL is used to access the Admin. Options: Yes / No
Custom Admin URLGlobalSpecifies a custom URL to access the Admin. By default, the Admin URL is the same as the base URL.
Important: The Admin URL must be in the same Commerce installation, and have the same document root as the storefront.
Use Custom Admin PathGlobalDetermines if a custom path is used to access the Admin. The default path is admin. Options: Yes / No
Custom Admin PathGlobalChanges the name of the default Admin path to something hard to guess. Enter the custom path name in lowercase characters. For example: aardvark

Security

Security

For more information about setting these options, see Configure Admin security in the Admin Systems Guide.

FieldScopeDescription
Admin Account SharingStore ViewDetermines if an Admin user can be logged in to the same account simultaneously from different devices. Options:
Yes - Allows multiple active sessions from the same Admin account.
No - Allows only one active session per Admin account.
Password Reset Protection TypeStore ViewDetermines the method that is used to manage password reset requests. Options:
By IP and Email - The password can be reset online after a response is received from the notification is sent to the email address associated with the Admin account.
By IP - The password can be reset online without additional confirmation.
By Email - The password can be reset only by responding by email to the notification that is sent to the email address associated with the Admin account.
None - The password can be reset only by the store administrator.
Recovery Link Expiration Period (hours)GlobalDetermines the number of hours a password recovery link remains valid.
Max Number of Password Reset RequestsStore ViewDetermines the maximum number of password requests that can be submitted per hour.
Min Time Between Password Reset RequestsStore ViewDetermines the minimum number of minutes between password reset requests.
Add Secret Key to URLsGlobalWhen enabled, appends a secret key to the Admin URL as a precaution against exploits. Options: Yes / No
Login Is Case SensitiveGlobalDetermines if login credentials entered by a user must match the case of the ones stored. Options: Yes / No
Admin Session Lifetime (seconds)GlobalDetermines the length of an Admin session in seconds.
Maximum Login Failures to Lockout AccountGlobalDetermines the number of times Admin users can try to log in before their accounts are locked. If the field is empty, no minimum is set. Default value: 6
Lockout Time (minutes)GlobalDetermines the number of minutes an Admin account is locked before the user can try to log in again. Default value: 30
Password Lifetime (days)GlobalDetermines the number of days before an Admin password expires. If the field is empty, no lifetime is set. Default value: 90
Password ChangeGlobalDetermines if Admin users are required to change their passwords. Options:
Forced - Requires that Admin users change their passwords after the account is set up.
Recommended - Recommends that Admin users change their passwords after the account is set up.