latest--client-extension-type-instance-settings.schema

Provide a localized template for the body of user invitation emails.

Define a specific email address for the sender of user invitation emails. If empty, the inviter's email address is used.

Define a specific name for the sender of user invitation emails. If empty, the inviter's name is used.

Provide a localized template for the subject of user invitation emails.

Define the time (in hours) before the invitation token expires.

Enter the list of account user email domains that are prohibited from self registration (e.g. gmail.com, yahoo.com, acme.com). Administrators can manually add account users with blocked email domains. Enter one email domain per line.

Set custom top-level domains that will be used when validating an account's domains. These should not be common.

Enable to allow entering a list of valid email domains when editing an account. Account users must have a matching email domain for self registration. Administrators can manually add account users with non-matching email domains.

Enable postprocessing of all legacy markup in fragments, web content, and blogs so that Adaptive Media is able to work with it. Enabling this option may impact the performance of your sites.

Set the API key for the Google Cloud Natural Language API. Billing must be enabled for this API to work. See {0} for more information.

Auto tag of text using the Cloud Natural Language API.

Enable auto tagging of text using the Cloud Natural Language API Classification endpoint.

Set the classifier's confidence of the category. This number represents how certain the classifier is that this category represents the given text.

Enable auto tagging of text using the Cloud Natural Language API Entity endpoint.

The salience score for an entity provides information about the importance or centrality of that entity to the entire text.

Set the maximum number of tags that will be automatically added to a single asset. Set to 0 if there is no limit. The value defined for the system scope takes precedence over the one defined here, so If this value is greater than the one defined at system scope level, the threshold applied will be the one defined at system scope level.

If this option is checked, the option to trigger auto tagging when editing an asset will be enabled by default.

OpenNLP Text Auto Tagging is based on three open source models (Location name finder model, Organization finder model, and Person name finder model). Use with caution because its accuracy may be limited.

Set the minimum confidence threshold (from 0 to 1) above which tags will be applied.

When checked, assets with child categories also appear in search results. When unchecked, only assets with the exact category matches appear in search results.

Specify the maximum number of categories that a vocabulary can have.

Set the default size of a batch containing records to be written to an export file.

Set the default size of a batch containing records from an import file that will be written to a database.

Set the engine used to generate captchas. reCAPTCHA uses an external service that must be configured independently but provides an audible alternative which makes the captcha accessible to the visually impaired. See https://www.google.com/recaptcha/admin/create for details.

Set the maximum number of captcha checks per portlet session. Set this value to 0 to always check. Set this value to a number less than 0 to never check. Unauthenticated users will always be checked on every request if captcha checks are enabled.

Input class names that implement nl.captcha.backgrounds.BackgroundProducer. These classes will be randomly used by Simple CAPTCHA to generate a background for a captcha image.

Input class names that implement nl.captcha.gimpy.GimpyRenderer. These classes will be randomly used by Simple CAPTCHA to gimp a captcha image.

Set the height for captcha images generated by Simple CAPTCHA.

Input class names that implement nl.captcha.noise.NoiseProducer. These classes will be randomly used by Simple CAPTCHA to add noise to a captcha image.

Input class names that implement nl.captcha.text.producer.TextProducer. These classes will be randomly used by Simple CAPTCHA to generate text for a captcha image.

Set the width for captcha images generated by Simple CAPTCHA.

Input class names that implement nl.captcha.text.renderer.WordRenderer. These classes will be randomly used by Simple CAPTCHA to render text for a captcha image.

Provide a localized template for the body of user invitation emails.

Provide a localized template for the subject of user invitation emails.

Check this option to automatically check all modification deletion conflicts by default. This will let you review any deletion conflicts and prevent Liferay from overwriting deletions made in a publication when updating production.

Enabling the schema version check will allow unpublished publications to go out of date after an upgrade.

These applications will be hidden from the application menu when you are in a publication.

These applications do not participate in a publication. Any data saved will be saved directly into production.

Show all data in the data tab when reviewing a change as an administrator.

These applications do not support publications. Any data saved in a publication will result in an error.

Do not change it in production as you will introduce SEO issues.

You must restart portal after this change. Do not change it in production as you will introduce SEO issues.

Set the API key for the Google Cloud Vision API. Billing must be enabled for this API to work. See {0} for more information.

Auto tags images using the Google Cloud Vision API.

Enable auto tagging of images in the document library using the Google Cloud Vision API.

Set the endpoint for the Computer Vision API V2 (e.g. {0}). See {1} for more information.

Set the API key for the Computer Vision API V2. See {0} for more information.

Auto tags images using the Microsoft Cognitive Services Computer Vision API V2.

Enable auto tagging of images in the document library using Microsoft Cognitive Services.

TensorFlow Image Auto Tagging is based on an open source model (Inception 5h). Its accuracy might be limited so please use with caution.

Set the minimum confidence threshold (from 0 to 1) above which tags will be applied.

Enable auto tagging of images in the document library using TensorFlow.

Add the file extension to the file entry friendly URL by default.

A file mime type of * will permit all file mime types.

Set the OAuth 2 client id for the Google Drive API. Go to {0} to create it.

Set the OAuth 2 client secret for the Google Drive API. Go to {0} to create it.

Set the API Key for the Google Picker API. Go to {0} to create it.

Set the OAuth 2 client id for the OneDrive API. Go to {0} to create it.

Set the OAuth 2 client secret for the OneDrive API. Go to {0} to create it.

Set the tenant for the OneDrive API. Go to {0} to obtain it.

Set the cache control policy for documents with view permissions for guests.

Set the number of seconds after a response is generated in which a response will be considered fresh.

Set a list of mime types that will be uncacheable.

The settings in this configuration let you control the export/import, staging, and site template propagation processes.

If checked, all asset links are included from the site within the given date range. Uncheck to include only those asset links which are connected to the content.

If checked, then the generated previews and thumbnails will be included during the staging process.

If checked, the permissions assigned for the exported pages and individual portlet windows are always included by default.

If checked, the delete operations performed for content types will be always replicated in the target site by default.

If checked, then the advanced publication configuration screen will be displayed by default when publishing pages.

If checked, publishing or importing some types of content with text in them will cause Liferay to check the content for any links to documents, and ensure that each of these links points to a valid document.

If checked, publishing or importing some types of content with text in them will cause Liferay to check the content for any references to web content feeds, and ensure that each one of these references points to a valid feed.

If checked, publishing or importing some types of content with text in them will cause Liferay to check the content for any links that reference one of the portal's virtual hosts, and ensure that each of these links points to a valid page within Liferay. Uncheck this if your virtual host has pages not in Liferay.

Specify a URL pattern that will be whitelisted when validating layout references. URLs that match this pattern will always pass the validation even if they do not point to a valid Liferay page.

If checked, publishing or importing will cause Liferay to check missing references. If unchecked, missing reference validation is skipped. As a result, references without existing targets can be published or imported to the target site.

When enabled, fragment JavaScript is embedded in a script as a module instead of as a function.

When enabled, changes will be propagated immediately after publishing a fragment entry. If staging is enabled, this setting does not affect live sites.

When enabled, changes will be propagated immediately during the deploy process. When disabled, changes can be propagated manually after deploy process.

Enable this to allow fragment authors to use FreeMarker.

Choose the default redirection type to use when old friendly URLs are referenced for display page templates or pages.

This type of redirect will be used when a page or piece of content using a display page template is accessed using an old friendly URL.

Enable to show a message when you are redirected to a different layout friendly URL.

For changes made here to take effect, you must reload the browser page after saving.

Define the time, in minutes, in which the SPA cache is cleared. Use a zero value if the cache should never expire during SPA navigation. Use a negative value if the cache should be disabled.

Define the custom paths that SPA should ignore.

If this is checked, the single page application framework will allow for faster navigation between pages.

Define the CSS selectors that SPA should ignore.

Preload CSS resources before applying UI changes. This will prevent FOUC (flash of unstyled content) at the expense of making UI updates slower.

Define the time, in milliseconds, in which a SPA request times out. Use a zero value if the request should never timeout.

Define the time, in milliseconds, in which a notification is shown to the user stating that the request is taking longer than expected. Set to 0 if no notification should be shown.

Set the balance between caching span and size of the import maps (which affect the size of the page's HTML). If you decide not to use hashes, the import maps will be smaller but the caching span will be limited. On the other hand, if you use one hash per file, the import maps will be bigger but files will be infinitely cacheable.

Set the value of the "max-age" directive in the "Cache-Control" header for mutable CSS style sheets.

Set the value of the "max-age" directive in the "Cache-Control" header for mutable JavaScript files.

Set the value of the "max-age" directive in the "Cache-Control" header for labels modules.

If checked, a "no-cache" directive (instead of "must-revalidate") will be sent in the "Cache-Control" header for CSS style sheets.

If checked, a "no-cache" directive (instead of "must-revalidate") will be sent in the "Cache-Control" header for JavaScript files.

If checked, a "no-cache" directive (instead of "must-revalidate") will be sent in the "Cache-Control" header for labels modules.

If checked, a "no-cache" directive (instead of "must-revalidate") will be sent in the "Cache-Control" header for CSS style sheets that contain tokens (e.g. "@theme_image_path@").

If checked, a "no-cache" directive (instead of "must-revalidate") will be sent in the "Cache-Control" header for translated JavaScript files (those that contain invocations to "Liferay.Language.get()" and do not have an associated language.json file).

Set the value of the "max-age" directive in the "Cache-Control" header for CSS style sheets that contain tokens (e.g. "@theme_image_path@").

Set the value of the "max-age" directive in the "Cache-Control" header for translated JavaScript files for translated JavaScript files (those that contain invocations to "Liferay.Language.get()" and do not have an associated language.json file).

If checked, the methods getRemoteAddr() and getRemoteHost() will be undefined within the Liferay.ThemeDisplay global object. This configuration is primarily implemented to mitigate privacy risks by avoiding the exposure of client IP/host information and to optimize performance by allowing public caching of pages for unauthenticated users. Note that checking this option will make custom code that relies on these methods fail.

Set this to true to enable comments for journal articles.

Check this if structure keys should always be autogenerated.

Check this if template keys should always be autogenerated.

Specify characters that are not allowed in web content folder names.

Set the check interval in minutes.

Set a list of custom token names that will be replaced when article content is rendered.

Set a list of custom token values that will be replaced when article content is rendered.

Set this to true to expire all article versions when expiring an article. Set this to false to only expire the latest approved article version when expiring an article.

Set this to true to index all article versions. Set this to false to index only the last indexable version.

Specify whether processed web content will be cached and reused when running an export or a publish process. Setting this to true will speed up export or publish processes involving web content, but will increase memory usage. The cache size and timeout may be configured for the cache using the cache name "com.liferay.journal.internal.exportimport.content.processor.JournalArticleExportImportProcessorCache".

Set the token used when inserting simple page breaks in articles.

Set this to true if web content articles should be published to live by default.

Set whether the web content version history should be included in single asset publish processes.

Set this to false if only the latest approved version of web content articles should be published by default.

Enabling will automatically extend the session while the page editor is opened.

The maximum number of items that are shown in a collection are limited in the Edit mode, due to page render performance. This limit does not affect the collection visualization in the published page. Please be aware that increasing this value might have a negative impact on the performance of the Edit mode of a Content Page.

Google PageSpeed Insights can find accessibility and SEO issues in your pages, and provide suggestions to fix them.

SEO Configuration

Selecting "Use Default Language URL" will make all pages use as canonical URL the URL set for the default language of the site. Selecting "Use Localized URL" will set for each localized page the URL corresponding to its language as canonical URL.

Generate Hreflang metadata only for languages with translated content.

Enabling will embed Open Graph meta tags on every page so that content can be shared on applications supporting this protocol (e.g. Facebook, Twitter, Slack, etc.).

Site Templates Configuration

If checked, old site template propagation import tasks will be cancelled when new ones are already scheduled for the same site. This can help to optimize the site template propagation process, when the template itself is frequently changed, and the propagation is also frequently triggered. This way, the sites will only be updated with the latest version of the template.

Set the OAuth 2 client ID for the Outlook API.

Set the OAuth 2 client secret for the Outlook API.

If enabled, the POP3 connection will use OAuth 2 as the authentication mechanism.

If enabled, the SMTP connection will use OAuth 2 as the authentication mechanism.

Set the tenant ID for the Outlook API. Go to {0} to obtain it.

Manually specify additional JavaMail properties to override the existing configuration.

Set the sender address on the one-time password email.

Enabling multi-factor authentication implies enabling Email One-Time Password. It is strongly advised that other forms of user authentication that only support a single factor are disabled (e.g. Basic, Digest, WEBDAV).

Set the number of verification attempts allowed before blocking for the retry timeout.

Set the multi-factor authentication checker order. Checkers with higher order will be shown first.

Set the length of a one-time password.

Set the allowed time in seconds between one-time password requests.

Set the time in seconds to block requests after reaching the limit for failed attempts allowed.

Enable to relax the origin matching rule to allow any port number.

Enable to relax the origin matching rule to allow any subdomain, of any depth.

Set the number of allowed credentials per user.

Enable Fast IDentity Online 2.

Set the multi-factor authentication checker order. Checkers with higher order will be shown first.

Set the allowed origins that returned authenticator responses will be compared against. The default is the set containing only the string of "https://" + Relying Party ID.

Set the relying party ID. It must be equal to the origin's effective domain, or a registrable domain suffix of the origin's effective domain. For example an origin of https://login.example.com:1337 can only have relying party ID as one of the following: login.example.com or example.com. This is done in order to match the behavior of pervasively deployed ambient credentials (e.g. cookies, [RFC6265]).

Set the relying party name.

Set the allowed IP address and the network mask (can be either IPv4 or IPv6). Use the add button to add multiple ones.

When the IP address configuration is enabled, the instance will check if the user tries to log in from a valid network ip and will allow the access the portal without showing any other multi-factor authentication verifiers.

Set the size of the algorithm key.

Set the time in milliseconds that the clocks can differ before a code will be rejected. This means the checker could perform a validation against the current time and then two further validations (+ clock skew time / - clock skew time).

Set the sender address on the time-based one-time password reuse attempt warning email.

Enable time-based one-time password. Take into account that time-based one-time password also needs to be configured by each user. They will find a new section to configure it at "Account Settings".

Set the multi-factor authentication checker order. Checkers with higher order will be shown first.

OAuth 2 Incoming Assertion Issuer

Input signature verification keys in JWKS format. In a typical scenario, one can retrieve them from an assertion issuer's JWKS endpoint.

Choose one of the following types to authenticate a user. Assertion issuer must configure assertion's "sub" claim to the same type.

Set the URL to screen where users approve authorization.

Set the URL where users can authenticate.

Set the maximum file size (in megabytes) that a guest user can upload through attachment fields in an object entry.

Set the maximum number of object entries per object definition that can be created by a guest user. After reaching this limit, object entries created by a guest user will no longer be accepted.

Choose between days or weeks.

Set the interval (in minutes) to check for expiration, publishing, and review of object entries.

Define the maximum retention period for entry versions. Once this period expires, the system will automatically delete the oldest versions to optimize storage space.

Define the maximum number of entries to be stored per object. Once this limit is reached, the oldest versions will be automatically deleted to optimize storage space.

Set hash provider configuration name.

BCrypt Rounds

Set hash provider configuration name.

Set message digest algorithm.

Set message digest salt size.

Enables CORS for matching URLs in the portal.

Set URL pattern where CORS is enabled.

Set the headers to be sent in response to CORS requests in the form of "Name: Value".

Identifies the configuration. The name is not used directly in the application.

Configure third party providers and other settings to index and search text embeddings. You can enable additional providers for Semantic Search in Instance Settings > Feature Flags > Beta.

Enable deep pagination to paginate through all the results of a search query.

The amount of time in seconds the search engine will keep a point in time alive (between 1 and 60).

Enable deep pagination to paginate through all the results of a search query.

The amount of time in seconds the search engine will keep a point in time alive (between 1 and 60).

Enable or disable the suggestions REST endpoint. When disabled, search bar suggestions are not available for this virtual instance.

Set either bind or password-compare for the LDAP authentication method. Bind is preferred by most vendors so that you do not have to worry about encryption strategies.

Set the password encryption to use for comparing passwords during import and to use for encrypting passwords during export. Comparing passwords during import will only be used when the property "LDAPAuthConfiguration.method" is set to password-compare. If the encryption is set to NONE, which is the default value, passwords are considered as plain text. The SHA-512 algorithm is currently unsupported.

Set this to true to use LDAP's password policy instead of the portal password policy. If set to true, it is possible that portal generated passwords will not match the LDAP policy. See the "passwords.regexptoolkit.*" properties for details on configuring RegExpToolkit in generating these passwords. Note that if this is enabled, the portal will not check for valid passwords, expired passwords, or users that are locked out. This is now handled by the LDAP server's password policy.

Enter the search filter that is used to test the validity of a user. The tokens @company_id@, @email_address@, @screen_name@, and @user_id@ are replaced at runtime with the correct values.

The Base DN specifies the initial search context for users and is optional.

The system time difference (in milliseconds) between the portal and the LDAP server. This is required for validating the user's modified timestamp during import.

When importing and exporting users, the portal will use this mapping to connect LDAP user attributes and portal contact's custom attributes.

When importing and exporting users, the portal will use this mapping to connect LDAP user attributes and portal contact attributes.

When a group is exported to LDAP and the group does not exist, the group will be created with the following default object classes.

When importing groups, the portal will use this mapping to connect LDAP group attributes and portal user group attributes.

Settings for importing groups from LDAP to the portal. These settings are not used unless the property "LDAPImportConfiguration.enabled" is set to true.

New groups will be created at the specified DN. This will only be active if the property "LDAPAuthConfiguration.enabled" and "LDAPExportConfiguration.enabled" are set to true.

When checked, users do not need to match the LDAP server's search filter to authenticate.

When importing and exporting users, the portal will use this mapping to connect LDAP user attributes and portal user's custom attributes.

When a user is exported to LDAP and the user does not exist, the user will be created with the following default object classes.

Set the user attributes that are controlled from the portal. When adding or updating a user from LDAP, these attributes will be skipped.

When importing and exporting users, the portal will use this mapping to connect LDAP user attributes and portal user attributes.

Settings for importing users from LDAP to the portal. These settings are not used unless the property "LDAPImportConfiguration.enabled" is set to true.

New users will be created at the specified DN. This will only be active if the property "LDAPAuthConfiguration.enabled" and "LDAPExportConfiguration.enabled" are set to true.

Set the page size for directory servers that support paging. This value needs to be 1000 or less for the Microsoft Active Directory Server.

Set the number of values to return in each query to a multivalued attribute for directory servers that support range retrieval. The range size must be 1000 or less for Windows 2000 and 1500 or less for Windows Server 2003.

Settings for exporting users from the portal to LDAP. This allows a user to modify his first name, last name, etc. in the portal and have that change pushed to the LDAP server. This setting is not used unless the property "LDAPAuthConfiguration.enabled" is set to true.

Set this to true if groups and their associations should be exported from the portal to LDAP. This setting is not used unless the property "LDAPAuthConfiguration.enabled" is set to true.

Set this to true if the portal should automatically create a role per group imported from LDAP. The role will be assigned to the group so that users can automatically inherit that role when they are assigned to the group.

Specify whether time-group DN lookups will be cached during LDAP import and login. If set to true, this will speed up LDAP import and login, but updates to group attributes will not be recognized until the cache entry expires. The cache size and timeout may be configured for the cache using the cache name "com.liferay.portal.security.exportimport.UserImporter".

Set the lock expiration time for LDAP import. By default, the expiration time is 1 day.

Set either user or group for import method. If set to user, the portal imports all users and the groups associated with those users. If set to group, the portal imports all groups and the users associated with those groups. This value should be set based on how your LDAP server stores group membership information.

The "sub" claim is the primary user matcher. If matching fails, the configured matcher field is used as a fallback.

Set the client ID for the OpenID Connect provider.

Set the client secret for the OpenID Connect provider.

Set the name for the OpenID Connect provider.

Set the scopes Liferay will request during authentication. Scopes are delimited with spaces.

Set the authorization endpoint for the OpenID Connect provider.

Add custom authorization request parameters, e.g.: resource=https://contacts.google.com https://maps.google.com

Map the custom claims from the OpenId Connect provider to custom fields.

Add custom token request parameters, e.g.: resource=https://contacts.google.com https://maps.google.com

Set the discovery endpoint for the OpenID Connect provider. If this is set, manually set endpoints will be ignored.

Discovery endpoint metadata will be cached on this interval in milliseconds. If set to 0, Ehcache's default time to live value of 600 seconds will be used.

Set the supported ID token signing algorithms for the OpenID Connect Provider. If the discovery endpoint is not specified, these algorithms are used. In this case, the algorithm RS256 must be included and must be the first algorithm in the list. If the discovery endpoint is specified, no algorithms should be specified here since the supported signing algorithms for the identity token are obtained from the discovery endpoint.

Set the issuer URL for the OpenID Connect provider.

Set the JWKS URI for the OpenID Connect provider.

Set the ID token signing algorithm registered with the OpenId Connect provider. The default is RS256.

Set the subject types for the OpenID Connect provider.

Set the amount of time to wait (in milliseconds) when establishing a connection to validate the token before timing out. A value of 0 means infinity and is not recommended.

Set the token endpoint for the OpenID Connect provider.

Set the user information endpoint for the OpenID Connect provider.

Set the page size limit of elements that can be recovered through REST. Enter a negative number or zero for unlimited page size.

Set the query depth limit for GraphQL. Enter a negative number or zero for an unlimited query depth.

Define the look and feel for personal applications. Use the same look and feel of the current site or My Dashboard pages.

Enable to always show the Personal Menu in the Control Menu. This guarantees users can always access the Personal Menu even if a theme does not provide it.

Enable to show the notification badge in the Personal Menu.

Configure which domains or IP addresses can be redirected to.

Set the domains which the portal is allowed to redirect to. Remove all entries to allow any domain. Specifying a domain with a leading "*." allows redirects to subdomains. PORTAL_DOMAINS will be replaced with the current domain of the portal or site.

Set the IPs which the portal is allowed to redirect to. Remove all entries to allow any IP. SERVER_IP will be replaced with the IP of the host server.

Set which protocols are allowed in redirect URLs. Remove all entries to allow any protocol.

If you are redirecting by domain, the portal will only redirect users to domains defined in the "Redirect URL Domains Allowed" fields. If you are redirecting by IP, the portal will only redirect to domains whose IP address resolves to an IP address defined in one of the "Redirect URL IPs Allowed" fields.

Allow showing the login portlet when no SAML IdP is matched to the login request.

Choose whether assertions must be signed by the IdP

Choose whether the IdP Authn requests from SPs must be signed.

When the Authn request is signed, the service provider can request to use other ACS (Assertion Consumer Service) URLs not specified in the metadata for receiving the Authn response.

The system time difference (in milliseconds) between this SP and the IdP. Required for correct message validation.

Defines how long IdP assertions last (in seconds). Used when configuring new SP connections.

The local SAML entity's ID

Set the password used to protect the entry within the keystore.

Password used to protect the encryption entry within the keystore

After IdP authentication, import user attributes from the LDAP servers configured via This SP's instance settings

SSO session time limit managed by the IdP (in seconds)

Time (in seconds) till idle session expires

Sign Authn Requests from This SP

Sign metadata provided to peer SAML entities

Require SAML messages to be exchanged over SSL. URLs in the metadata provided to peer SAML entities become https.

Define the time (in seconds) before clearing the Anonymous Segment cache.

Define the time (in seconds) before clearing the Interest Terms cache.

When checked, this option allows assigning roles to users dynamically.

Disable this option to prevent user segmentation on every request. If disabled, collections and experiences personalization will not be available.

Link a session property to a vocabulary.

Set the check interval in minutes.

The settings in this configuration let you control the staging process.

Uncheck to avoid deleting the temporary LAR during a failed staging publish process. In remote staging contexts, this only applies for the staging environment.

Uncheck to avoid deleting the temporary LAR during a successful staging publish process. In remote staging contexts, this only applies for the staging environment.

The remote environment's virtual host is used when accessing the remote live site from the staged site.

Enable or disable the integration with Amazon Translate API for automatic translations.

Enable or disable the integration with Microsoft Translate API for automatic translations.

Enable or disable the integration with DeepL Translate API for automatic translations.

Enable or disable the integration with Google Cloud Translation API for automatic translations.

Specify the service account private key in JSON format.

The user ID of the user designated as the anonymous user. This user will be used to replace a given user's data when an anonymization operation is requested.

Enable to check the image token for user portraits and organization logos before displaying them.

Enable to set the user's initials as the default user portrait. Otherwise, the default portrait image files will be used. The default portrait image path is set by the "image.default.user.portrait" property in portal.properties.

Set the maximum user portrait height in pixels. A value of 0 indicates no restrictions on user portrait dimensions.

Set the maximum file size in bytes for user portraits. A value of 0 indicates no limit. Regardless of the value entered here, uploaded files cannot exceed the "Max Size" set in System Settings > Infrastructure > Upload Servlet Request.

Set the maximum user portrait width in pixels. A value of 0 indicates no restrictions on user portrait dimensions.