Settings
In the Admin Settings you can adjust various global settings of your MergeBoard workspace, e.g. who is allowed to register, or whether publicly viewable projects are allowed. Explanations of the individual settings can be found below.
User Settings
- Registration Enabled
When this checkbox is enabled, users can register themselves in your MergeBoard workspace. The registration can optionally be restricted to certain domains by setting Allowed email pattern. Alternatively, you can also set that newly registered user accounts are initially disabled. Note that newly registered users do not have access to any projects yet. You have to add them as members manually after they have registered.
- Disable user accounts after registration
Only has an effect when Registration Enabled is active. When the option is enabled, all newly registered user accounts are initially disabled, and must be manually activated by an admin. It is recommended that you also enable the Notify adminis about new users option so that you are notified about new registrations and can activate the users after verification.
We recommend activating this option especially if you have chosen a monthly payment method and want to make sure that newly registered users do not generate unexpected costs.
- Notify admins about new users
Notifies all administrators of the MergeBoard workspace when a new user registers or logs in for the first time via OAuth2 (e.g. to assign them to the appropriate groups and projects).
- Allowed email patterns
Only has an effect when Registration Enabled is active. Allows registration of new users only if their email matches the specified pattern. You can use the following wild card characters:
Pattern
Description
*Wildcard for zero or more characters
?Wildcard for a single character
[abc]List of possible characters (here: abc)
[!abc]Allows any character not part of the list (not abc)
If you want to check for the existence of one of the special wildcard characters in the mail addresses, wrap them inside brackets. For example, if you want to check if the address contains an asterisk, write
[*].In most cases, something like
*@mycompany.comwill suffice, allowing only your employees to register.
- Minimum Password Strength
MergeBoard ensures that entered passwords meet certain minimum requirements. Unlike many other products, MergeBoard does not impose a minimum password length or use of special characters, but calculates the security of passwords based on an entropy measure. Passwords that are very common or easy to guess, get a low value while complex and unusual passwords get a higher value. An uncommon password in combination with our brute force protection, that temporarily disables further logins after too many failed attempts, protects you against the most common attacks.
To give you an idea what this means in practice, here are a few example passwords and their entropy:
Password
Entropy
password8
qwerty12317
12345678914
1q2w3e4r5t20
safregtul45
LetMeIn1!66
Pa$$word1234test67
SafReGtUl83
qtVRaX2UjL93
QVF9KekRsMw9113
We recommend a value of at least 80 to ensure that the passwords are sufficiently secure according to the current state of information technology. Additional measures are applied to keep the plain text password safe even if an attacker would be able to obtain their hash value.
This option has no effect for logins via an OAuth2 provider.
- Registration Message
Only makes sense in combination with Registration Enabled. The message is displayed to users when they try to register. You can use the message to provide users with more information regarding the registration process or MergeBoard in general. Note that Markdown input is supported for this field. By clicking Preview you can always see how the text will appear to your users.
- Dashboard Message
The dashboard message is displayed to users at the top of the dashboard once they have logged in. Note that Markdown input is supported for this field. By clicking Preview you can always see how the text will appear to your users.
Instance Settings
- Support Contact
The email stored here is displayed to users as a support contact at various places, e.g., when changing their email address. It is therefore useful to enter the email address of a person with admin rights in MergeBoard.
- Legal Notice / Impressum
Depending on the legal situation, you may be required to maintain an imprint with contact details in MergeBoard. This concerns, among others, users from Germany who want to make their MergeBoard workspace public for everyone.
The entered text will be displayed to users when they click on the Legal Notice / Impressum link in the footer of the website. Note that Markdown is also supported for the field. By clicking Preview you can see how it looks to visitors of your MergeBoard workspace.
Project Settings
Be careful when allowing public projects
In most cases, your MergeBoard workspace contains proprietary code that you don’t want to share with the public. Therefore, be very careful when changing the following settings!
- Allow public projects
Enable this option if you want to make one or multiple projects publicly available in your MergeBoard workspace. Note that changing this setting alone has no effect. Projects must also be marked as Public in the project settings.
When this option is disabled, projects are not visible even when they are marked as Public in the project settings.
- Enforces all new projects to be public
Forces all newly created projects to be public. This option only makes sense if you want to run a completely public MergeBoard workspace.