Identity Manager 8.1.5 - Administration Guide for Privileged Account Governance

You can add words to a list of restricted terms to prohibit them from being used in passwords.

NOTE: The restricted list applies globally to all password policies.

To add a term to the restricted list

In the Designer, select the Base Data | Security settings | Restricted passwords category.
Create a new entry with the Object | New menu item and enter the term you want to exclude from the list.
Save the changes.

Checking passwords

When you check a password, all the password policy settings, custom scripts, and the restricted passwords are taken into account.

To check if a password conforms to the password policy

In the Manager, select the Privileged Account Management | Basic configuration data | Password policies category.
Select the password policy in the result list.
Select the Change master data task.
Select the Test tab.
Select the table and object to be tested in Base object for test.
Enter a password in Enter password to test.

A display next to the password shows whether it is valid or not.

Testing the generation of passwords

When you generate a password, all the password policy settings, custom scripts and the restricted passwords are taken into account.

To generate a password that conforms to the password policy

In the Manager, select the Privileged Account Management | Basic configuration data | Password policies category.
In the result list, select the password policy.
Select the Change master data task.
Select the Test tab.
Click Generate.

This generates and displays a password.

Initial password for new PAM user accounts

You can issue an initial password for a new user account in the following ways:

Create user accounts manually and enter a password in their master data.
Assign a randomly generated initial password to enter when you create user accounts.
- In the Designer, set the TargetSystem | PAG | Accounts | InitialRandomPassword configuration parameter.
- Apply target system specific password policies and define the character sets that the password must contain.
- Specify which employee will receive the initial password by email.
Use the employee's central password. The employee’s central password is mapped to the user account password. For detailed information about an employee’s central password, see the One Identity Manager Identity Management Base Module Administration Guide.