Identity Manager 8.0 - Configuration Guide

Restricted Passwords

You can add words to a list of restricted terms to prohibit them from being used in passwords.

To add a term to the restricted list

1. Select the category Base Data | Security Settings | Restricted passwords in the Designer.

2. Create a new entry with the menu item Object | New an enter the term to excluded to the list.
3. Save the changes.

Testing a Password

When you test a password, all the password policy settings, custom scripts and the restricted passwords are taken into account.

To test whether a password conforms to the password policy

1. Select the category Base Data | Security Settings | Password policies in the Designer.

2. Select the password policy in the List Editor.
3. Select the Test tab.
4. Select the table and object to be tested in Base object for test.

5. Enter a password in Enter password to test.

   A display next to the password shows whether it is valid or not.

Testing Generating a Password

When you generate a password, all the password policy settings, custom scripts and the restricted passwords are taken into account.

To generate a password that conforms to the password policy

1. Select the category Base Data | Security Settings | Password policies in the Designer.

2. Select the password policy in the List Editor.

3. Select the Test tab.

4. Click Generate.

   This generates and displays a password.

Assigning a Password Policy

You can assign password policies to system user passwords, the employees' central password as well as passwords for individual target systems. Assign a password policy to the base object to which it should apply.

• The predefined password policy "One Identity Manager password policy" is assigned to the system user passwords (DialogUser.Password and Person.DialogUserPassword) as well as the employee's access code (Person.Passcode).

• The predefined password policy "Employee central password policy" is assigned to the employee's central password (Person.CentralPassword).

If you want to apply another password policy to the password column, change the password policy assignment in the Manager.

To change a password policy's assignment

1. Select the category Employees | Basic configuration data | Password policies in the Manager.

2. Select the password policy in the result list.
3. Select Assign objects in the task view.
4. Select the assignment you want to change in Assignments.
5. Select the new password policy to apply from the Password Policies menu.
6. Save the changes.

To reassign a password policy

1. Select the category Base Data | Security Settings | Password policies in the Designer.

2. Select the password policy in the result list.

3. Click Add in the Assignments section and enter the following data.

   Table 67: Assigning a Password Policy

   Property	Description
   Password column	The password column's identifier.
   Apply to	Application scope of the password policy. To specify an application scope Click ... next to the text box. Select the table which contains the password column under Table. Select the specific base objects under Apply to. Click OK.

4. Save the changes.