Notification Settings
Notification Settings control when and how SecTrail MFA sends automated messages to local users — welcome messages on account creation, and warnings before or after password and account expiry events. These notifications are delivered via SMS, email, or both channels simultaneously.
Notification Settings apply to local users only (users stored in SecTrail MFA's built-in user store). LDAP users are managed by the directory server and do not receive notifications from this system.
General Settings
Notification Channel
Determines which delivery channel(s) are used for all notifications:
| Option | Description |
|---|---|
| Disabled | No notifications are sent |
| SMS | Notifications delivered via the selected SMS profile |
| Notifications delivered via the selected Mail profile | |
| Both | Notifications delivered via SMS and email simultaneously |
SMS Profile
The SMS profile to use when the channel is SMS or Both. Only visible when SMS is selected.
Mail Profile
The Mail profile to use when the channel is Email or Both. Only visible when Email is selected.
Welcome Message
When enabled, a welcome message is automatically sent to new local users at account creation time.
| Field | Description |
|---|---|
| Enabled | Toggle to activate/deactivate the welcome message |
| Subject | Email subject line (required when channel includes email) |
| Message | Body text of the welcome message (SMS or email body) |
Available placeholders: {{NAME}}, {{USERNAME}}, {{PASSWORD}}, {{DATE}}
Scheduled Job Notifications
Five notification jobs can be independently configured. Each runs on a daily schedule at a configured time and delivers messages to affected users.
Password Expiry Warning
Notifies users in advance that their password is about to expire, giving them time to change it proactively.
| Field | Default | Description |
|---|---|---|
| Enabled | Off | Toggle to activate this notification job |
| Schedule Time | 09:00 | Time of day (HH:MM) the job runs |
| Days Before | 7 | How many days before expiry the warning is sent |
| Subject | — | Email subject (required when channel includes email) |
| Message | — | Notification body text |
Available placeholders: {{NAME}}, {{USERNAME}}, {{DATE}}, {{DAYS}}
Password Expired Notification
Notifies users whose password has already expired. This reminds them to contact an admin or use the self-service reset portal.
| Field | Default | Description |
|---|---|---|
| Enabled | Off | Toggle to activate this notification job |
| Schedule Time | 09:00 | Time of day (HH:MM) the job runs |
| Subject | — | Email subject (required when channel includes email) |
| Message | — | Notification body text |
Available placeholders: {{NAME}}, {{USERNAME}}, {{DATE}}
Account Expiry Warning
Notifies users in advance that their account is about to expire. Useful when accounts are created with a fixed validity period.
| Field | Default | Description |
|---|---|---|
| Enabled | Off | Toggle to activate this notification job |
| Schedule Time | 09:00 | Time of day (HH:MM) the job runs |
| Days Before | 7 | How many days before expiry the warning is sent |
| Subject | — | Email subject (required when channel includes email) |
| Message | — | Notification body text |
Available placeholders: {{NAME}}, {{USERNAME}}, {{DATE}}, {{DAYS}}
Account Expired Notification
Notifies users whose account has already expired.
| Field | Default | Description |
|---|---|---|
| Enabled | Off | Toggle to activate this notification job |
| Schedule Time | 09:00 | Time of day (HH:MM) the job runs |
| Subject | — | Email subject (required when channel includes email) |
| Message | — | Notification body text |
Available placeholders: {{NAME}}, {{USERNAME}}, {{DATE}}
Inactive Account Notification
Automatically expires accounts of users who have not logged in for 3 months and sends a notification.
| Field | Default | Description |
|---|---|---|
| Enabled | Off | Toggle to activate this notification job |
| Schedule Time | 09:00 | Time of day (HH:MM) the job runs |
| Subject | — | Email subject (required when channel includes email) |
| Message | — | Notification body text |
Available placeholders: {{NAME}}, {{USERNAME}}, {{DATE}}
Disabling All Notifications
The Disable button (available on the main Notification Settings page) sets the channel to Disabled and clears the SMS and Mail profile assignments in a single action. Individual job settings are preserved and can be re-enabled later by selecting a channel.
Setup Steps
- Go to Users → Notification Settings (or Configuration → Notification Settings)
- Select the notification Channel (SMS, Email, or Both)
- Select the corresponding SMS Profile and/or Mail Profile
- If welcome messages are needed: enable the Welcome Message toggle and fill in the subject and body
- For each scheduled job (Password Expiry Warning, Password Expired, Account Expiry Warning, Account Expired):
- Enable the job
- Set the schedule time
- Set the days before (for warning jobs)
- Fill in the subject (if email) and message body
- Save
Important Considerations
- Notification jobs run on the server's scheduled task queue. Ensure the Laravel scheduler (
php artisan schedule:run) is configured and running (typically via a cron job every minute). - Schedule time uses the server's local timezone. Verify the server timezone is correctly set.
- Message bodies support dynamic placeholders. Available placeholders for each notification type are listed in the respective section.
- SMS and email profiles must be configured and tested before enabling notifications. Go to Configuration → SMS Service or Configuration → Mail Server to set these up.
- Local users without a phone number will not receive SMS notifications even if the SMS channel is active.
- Local users without an email address will not receive email notifications even if the Email channel is active.