Organization Settings

The Settings section holds organization-wide configuration. These settings apply to every employee and every deal in the organization.

General settings

The General tab of Settings contains the following fields. Without the permission to update organization settings, the password policy, two-step verification, token lifetime and sign-in log fields are read-only.

Currency

The currency used for all monetary values in the organization — deals, proposals, price lists, and documents.

Currency is a single organization-wide setting. Every deal, proposal, and price list in the organization uses the same currency.

User session duration

How long a sign-in session lasts, in days. The default is three days. Valid values range from 1 to 100 days.

The duration is absolute: the session expires after the configured number of days regardless of activity. Changing the value also moves the end of sessions that are already open.

See session duration for what happens when a session ends.

Password policy

Three fields set the rules for passwords:

  • Password policy: minimum length (characters), from 6 to 128, default 6.

  • Password policy: passwords that cannot be reused, from 1 to 24, default 5, counting the current password.

  • Password policy: password lifetime (days), from 1 to 3650, empty by default, which means passwords never expire.

See password policy for the checks, and password expiry for what happens when a password expires.

Two-step verification

Chooses whom the organization requires to use two-step verification: Not required (the default), Required for everyone, or Required for selected roles, which adds a Roles field where you choose at least one role. Under Not required every employee can still turn it on.

Maximum access token lifetime

The longest lifetime, from 1 to 3650 days, that employees can give a personal access token. When the field is empty, which is the default, tokens may be created without expiration. The value is checked when a token is created, so changing it does not shorten tokens that exist.

This setting belongs to personal access tokens. This function is licensed. If your organization’s license does not include it, contact CityScreen. See access tokens.

Access token lifetime for OAuth applications (minutes)

How long an access token issued to an OAuth application is valid, from 5 to 1440 minutes. The default is 120. A change applies to tokens issued after saving.

This setting belongs to OAuth applications. This function is licensed. If your organization’s license does not include it, contact CityScreen. See OAuth applications.

Keep sign-in log for (days)

How long entries of the sign-in log are kept, from 90 to 3650 days. The default is 365. Older entries are deleted automatically, and the log is always written.

Default maximum discount for customers

The organization-wide upper limit on the discount percentage that can be applied to a proposal. A customer can have its own Maximum discount, which replaces this value for that customer.

See discounts and limits for how discounts are applied.

Public inventories

Controls whether unauthenticated users can view the organization’s inventory through the public inventory link. When enabled, the inventory map and display list are accessible without signing in.

Maximum proposals per deal

Limits how many proposals can be added to a single deal. This is a guard against unbounded proposal creation.

Deal stage labels

The display names shown for each of the seven fixed deal stages and their actions. A label is display text in the interface and has no effect on how a stage works.

See deal stages for the stage model.

Booking widget

Controls whether the public booking widget is enabled for the organization, and manages the widget’s authentication token.