Password policy, login security, two-factor authentication (2FA/TOTP), IP allowlist configuration, and login history queries.