Security (tab=security) covers session management, audit logging, and 2FA enforcement clinic-wide; a related section covers Social & Passwordless Login (Google OAuth and OTPless WhatsApp/Phone OTP).
What's here
Session management — control session behavior/timeouts.
Audit logs — link into the system's activity trail (see Security Incidents & Audit Logs).
2FA enforcement — require two-factor authentication for some or all staff roles.
Google OAuth — configure the client ID/secret enabling "Sign in with Google" on the login page (also reused by Google Calendar sync).