You can control several aspects of user login and authentication security:

Feature	Description	Related topics
Log in and log out controls	Control several dimensions of the log in and log out process for users, such as specifying a landing page that the user sees upon login and control how users log out.	Define login scenarios Enable the logout confirmation prompt Remove the Logout button Installation exits Specify lockout for failed login attempts
Authentication security	Control the password reset process and features like the Remember Me option. You can also use IP address-based controls for access to the instance and implement a nonce to be used with single sign-on digest authentication.	Strengthen password validation rules Example: The default self-service Password Reset process Change settings for the Remember me check box and cookie IP range based authentication Implementing a nonce