Chat now with support
Chat with Support

Identity Manager 8.1 - Administration Guide for Connecting to a Universal Cloud Interface

Managing Universal Cloud Interface Environments Setting up Synchronization with a Cloud Application in the Universal Cloud Interface Basic data for managing a Universal Cloud Interface environment Cloud Target Systems Container Structures in a Cloud Target System Cloud User Accounts Cloud Groups Cloud Permissions Controls Provisioning Object Changes Reports about Objects in Cloud Target Systems Appendix: Configuration Parameters for Managing Cloud Target Systems Appendix: Default Project Template for Cloud Application in the Universal Cloud Interface

Policy settings

Define the following settings for a password policy on the Password tab.

Table 18: Policy Settings

Property

Meaning

Initial password

Initial password for newly created user accounts. If a password is not entered or if a random password is not generated when a user account is created, the initial password is used.

Password confirmation

Reconfirm password.

Max. length

Minimum length of the password. Specify the number of characters a password must have.

Max. length

Maximum length of the password. Specify the number of characters a password can have.

Max. errors

Maximum number of errors. Set the number of invalid passwords. Only taken into account when logging in to One Identity Manager.

If a user has reached the number of maximum failed logins, the employee or system user can no longer log in to One Identity Manager.

You can reset the passwords of employees and system users who have been blocked in Password Reset Portal. For more detailed information, see the One Identity Manager Web Portal User Guide.

Validity period

Maximum age of the password. Enter the length of time a password can be used before it expires.

Password history

Enter the number of passwords to be saved. If, for example, a value of 5 is entered, the user's last five passwords are stored.

Min. password strength

Specifies how secure the password must be. The higher the password strength, the more secure it is. The value 0 means that the password strength is not tested. The values 1, 2, 3 and 4 specify the required complexity of the password. The value 1 represents the lowest requirements in terms of password strength. The value 4 requires the highest level of complexity.

Name properties denied

Specifies whether name properties are permitted or not permitted in the password. If this option is enabled, name properties are not permitted in passwords. The values of the columns for which the Contains name properties for password check option is set are taken into account. Adjust this option in the column definition in Designer.

Character classes for passwords

Use the Character classes tab to specify which characters are permitted for a password.

Table 19: Character classes for passwords

Property

Meaning

Min. number letters

Specifies the minimum number of alphabetical characters the password must contain.

Min. number lowercase

Specifies the minimum number of lowercase letters the password must contain.

Min. number uppercase

Specifies the minimum number of uppercase letters the password must contain.

Min. number digits

Specifies the minimum number of digits the password must contain.

Min. number special characters

Specifies the minimum number of special characters the password must contain.

Permitted special characters

List of permitted characters.

Max. identical characters in total

Maximum number of identical characters that can be present in the password in total.

Max. identical characters in succession

Maximum number of identical character that can be repeated after each other.

Denied special characters

List of characters, which are not permitted.

Lowercase not allowed

Specifies whether the password can contain lower case letters. This setting is only applies when passwords are generated.

Uppercase not allowed

Specifies whether the password can contain upper case letters. This setting is only applies when passwords are generated.

Digits not allowed

Specifies whether the password can contain digits. This setting is only applies when passwords are generated.

Special characters not allowed

Specifies whether the password can contain special characters. This setting is only applies when passwords are generated.

Custom scripts for password requirements

You can implement custom scripts for testing and generating password if the password requirements cannot be mapped with the existing settings options. Scripts are applied in addition to the other settings.

Detailed information about this topic

Script for checking a password

You can implement a check script if additional policies need to be used for checking a password, which cannot be mapped with the available settings.

Syntax for Check Scripts

Public Sub CCC_CustomPwdValidate( policy As VI.DB.Passwords.PasswordPolicy, spwd As System.Security.SecureString)

With parameters:

policy = password policy object

spwd = password to test

TIP: To use a base object, take the property Entity of the PasswordPolicy class.
Example for a script for testing a password

A password cannot start with ? or !. The script checks a given password for validity.

Public Sub CCC_PwdValidate( policy As VI.DB.Passwords.PasswordPolicy, spwd As System.Security.SecureString)

Dim pwd = spwd.ToInsecureArray()

If pwd.Length>0

If pwd(0)="?" Or pwd(0)="!"

Throw New Exception(#LD("Password can't start with '?' or '!'")#)

End If

End If

If pwd.Length>2

If pwd(0) = pwd(1) AndAlso pwd(1) = pwd(2)

Throw New Exception(#LD("Invalid character sequence in password")#)

End If

End If

End Sub

To use a custom script for checking a password

  1. Create your script in the category Script Library in the Designer.
  2. Edit the password policy.
    1. Select Cloud target systems | Basic configuration data | Password policies in Manager.

    2. Enter the name of the script to be used to check a password in the Check script input field on the Scripts tab.
    3. Save the changes.
Related Topics
Related Documents