Before you start operation, you need to configure login-related security settings, including whether you allow or disallow users to reset their passwords, password complexity requirement, and password lifetime.