On the authentication page you can manage:
The minimum password length of user passwords
Logout users automatically if they are inactive and disable the “Remember my login until I press logout on this computer”.
Two factor authentication using an OTP client or for ActiveSync devices
Restrict access based on IP addresses
The features vary depending on which modules are installed on your system.