The Cloud Administrator can update the SaaS Apps/Endpoints settings once the users are provisioned.

Procedure

On the Endpoint/ SaaS Apps workload page, go to the settings icon.
Select Endpoints & SaaS Apps settings and update the settings for the below components.

Update User Password Settings

The Password Policy is enabled by default with mandatory settings that allow you to govern the password creation and control the password lifecycle.

Expand to see a glimpse

Click the edit button and update the below fields:

Field	Description
Enable Password policy	Select this checkbox to enable the Password Policy for the users. Additional fields appear.
Enforce Strong Password	Select this checkbox to enforce a strong Password Policy. A strong password contains: Minimum 12 and maximum 32 characters A combination of alphanumeric and special characters Upper-case and lower-case letters
Cannot reset password to last	Enter the value to restrict users from setting passwords similar to previous ones. Set 0 for no limitations. Example : If you enter 3, the user cannot set the new password to the current and the previous passwords. 📝 Note For inSync GovCloud environment, the users cannot reset their password to the last 24 passwords by default.
Minimum lifetime for password (Applicable for GovCloud only)	Type the number of days you want a password to be used before the user can change it. The possible value range is between 1-60 days. Set the Minimum lifetime for password age to a value of 1 day. Setting
Max. invalid login attempts	Enter the maximum number of login attempts. The user's account is locked after invalid login attempts are exceeded.
Password expire after every	Type the number of days after which the user must reset the password. The recommended value range is 1 to 60 days. 📝 Note For inSync Cloud, the password expiration period should be between 0 and 99, where 0 = unlimited. For inSync GovCloud, the password expiration period should be between 1 and 60. The Minimum lifetime for passwords should be less than the password expiration period.

Configure Network Settings

You can allow or restrict inSync Client to back up the user data over specific networks. Similarly, you can define a unique string name for Druva Cloud to identify the network you want to allow/block.

Expand to see a glimpse

Click the edit button and update below fields:

Field	Description
Allowed network for backup	Add the network you want to allow backup data. 📝 Note Use a semicolon with space to add multiple networks. Example: OfficeNetwork;SecuredLAN;CORP
Restrict backup on any other network	Select this checkbox if you do not want to backup user data on any network other than the allowed networks
Restricted networks for backup	Add the network you want to restrict backup data. 📝 Note Use a semicolon with space to add multiple networks. Example: OfficeNetwork;SecuredLAN;CORP

The following table lists the guidelines to set unique string names on Windows and macOS devices.

Windows

macOS

For data cards, the service provider's name describes the interface. For example, Photon describes the data card provided by Tata Photon. You might want to use the string Photon to indicate a data connection.
You can use either the name or the device name of the network to define a unique string. Go to Network Connections in Control Panel to view the details of your networks configured for your device.
The characters you use in the string must be a sequential subset of the characters in the interface name. For example, the string TAP might best describe "TAP-Windows Adapter V9 network".
Ensure that no two strings are identical.
Ensure that you separate entries using a semicolon (;) and there is no white space between two entries.

If you have multiple network interfaces of the same type, you cannot block a specific network. For example, you can block all VPN interfaces but not a specific VPN connection.
inSync uses the string ppp to recognize 4G and 3G interfaces and the string tun to recognize VPN interfaces.
Use the string ppp to disable backup on all 4G and 3G interfaces and the string tun to disable backup on all VPN interfaces.
Ensure that no two strings are identical.
Ensure that you separate entries using a semicolon (;) and there is no white space between two entries.
For VPN connections, there are two adapters - Home network adapter and VPN adapter.
If both these networks are unrestricted, then, inSync performs the backup through the first available connection.
If both the home as well as the VPN network are restricted, then, inSync fails to perform any backups.
If the VPN adapter name is restricted but the home network is unrestricted, then, inSync performs backup through the home network and not through the VPN.

Customize Email Template

You can customize the email template sent to users.

Expand to see a glimpse

Click the Edit button to update the below fields:

Field	Description
Reply to	The reply-to email address of the Druva Cloud. 📝 Note By default, this field contains the email id of the first Cloud administrator.
Sender name	The sender name for emails sent by the server.
Signature	The signature that appears on emails sent by the server.

Enable Cloud Key Management

The Cloud Key Management feature is a secured mechanism to back up the SaaS Apps data and is an alternative method to the AD/LDAP Connector-based deployment.
Once you receive the confirmation email from Support about the activation of the Cloud Key Management feature for your account, you can enable it by selecting the Enable option. For more information, see Configure Cloud Key Management.

Add and manage Connectors

The AD/LDAP Connector is an agent used to install on a Windows device or server within your organization's network.

You need the Connector:

When using Active Directory (AD) or Lightweight Directory Access Protocol (LDAP) to import and manage new users in Druva.
When you want to protect Cloud Apps Office 365 and G-Suite data for your users, and you do NOT have:

A user endpoint device (desktop or laptop) configured for backup in Druva.
The Cloud Key Management feature is enabled.

The following table lists the actions you can perform in the Connectors tab.

Action	Description
Add Connector	Add a new inSync Connector in your environment. For more information, see Install or upgrade AD Connector.
Delete Connector	Delete an existing inSync Connector in your environment. For more information, see Delete AD Connector.
Get Registration Key	Generate a new registration key to register inSync Connector in your environment. 💡 Tip Do not regenerate the registration key after the inSync Connector is registered. If you regenerate the key, the existing registration key is deactivated.

Prerequisites to back up SaaS Apps data

Allow and restrict data networks for device backups

Endpoints and SaaS Apps Settings

How to restrict inSync backup over VPN

Prerequisites to back up SaaS Apps data