You can customize predefined password policies to meet your own requirements if necessary.
Password for logging in to
The password policy is applied for logging in to . This password policy defines the settings for the system user passwords (DialogUser.Password and Person.DialogUserPassword) as well as the passcode for a one time log in on the Web Portal (Person.Passcode).
NOTE: The password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts, or system users.
For more information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.
Password policy for forming employees' central passwords
An employee's central password is formed from the target system specific user accounts by respective configuration. The Employee central password policy defines the settings for the (Person.CentralPassword) central password. Members of the Identity Management | Employees | Administrators application role can adjust this password policy.
IMPORTANT: Ensure that the Employee central password policy does not violate the target system-specific requirements for passwords.
For more information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.
Password policies for user accounts
Predefined password policies are provided, which you can apply to the user account password columns of the user accounts.
IMPORTANT: If you do not use password policies that are specific to the target system, the password policy default policy applies. In this case, ensure that the default policy does not violate the target systems requirements.
There is no password policy predefined for custom target systems. Create your own password policy and apply it to the custom target system user accounts (UNSAccountB.UserPassword).
It is recommended that you set up your own password policy for every custom target system. You can also assign password policies at container level.
Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.
There is no password policy predefined for custom target systems. Create your own password policy and apply it to the custom target system user accounts (UNSAccountB.UserPassword).
It is recommended that you set up your own password policy for every custom target system. You can also assign password policies at container level.
Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.
The password policy that is to be used for a user account is determined in the following sequence:
-
Password policy of the user account's account definition.
-
Password policy of the user account's manage level.
-
Password policy of the user account's container.
-
Password policy of the user account's target system.
-
The password policy (default policy).
IMPORTANT: If you do not use password policies that are specific to the target system, the password policy default policy applies. In this case, ensure that the default policy does not violate the target systems requirements.
To reassign a password policy
-
In the Manager, select the Custom target systems > Basic configuration data > Password policies category.
- Select the password policy in the result list.
- Select Assign objects.
-
Click Add in the Assignments section and enter the following data.
-
Apply to: Application scope of the password policy.
To specify an application scope
-
Click 
next to the field.
-
Select one of the following references under Table:
-
The table that contains the base objects of synchronization.
-
To apply the password policy based on the account definition, select the TSBAccountDef table.
-
To apply the password policy based on the manage level, select the TSBBehavior table.
-
Under Apply to, select the table that contains the base objects.
-
If you have selected the table containing the base objects of synchronization, next select the specific target system.
-
If you have selected the TSBAccountDef table, next select the specific account definition.
-
If you have selected the TSBBehavior table, next select the specific manage level.
-
Click OK.
-
Password column: Name of the password column.
-
Password policy: Name of the password policy to use.
-
Save the changes.
To change a password policy's assignment
-
In the Manager, select the Custom target systems > Basic configuration data > Password policies category.
-
Select the password policy in the result list.
-
Select the Assign objects task.
-
In the Assignments pane, select the assignment you want to change.
-
From the Password Policies menu, select the new password policy you want to apply.
-
Save the changes.
Predefined password policies are supplied with the default installation that you can use or customize if required.
To edit a password policy
-
In the Manager, select the Custom target systems > Basic configuration data > Password policies category.
-
In the result list, select the password policy.
-
Select the Change main data task.
-
Edit the password policy's main data.
- Save the changes.
Detailed information about this topic
Related topics
Predefined password policies are supplied with the default installation that you can use or customize if required. You can also define your own password policies.
To create a password policy
-
In the Manager, select the Custom target systems > Basic configuration data > Password policies category.
-
Click 
in the result list.
-
On the main data form, enter the main data of the password policy.
- Save the changes.
Detailed information about this topic
