To edit a password policy
1. Select Epic healthcare | Basic configuration data | Password policies in One Identity Manager.
2. Select the password policy in the result list and select Change master data.
- OR -
Click in the result list toolbar.
3. Edit the password policy's master data.
4. Save the changes.
Enter the following master data for a password policy.
| Property | Meaning |
| Display name | Password policy name. Translate the given text using the  button. |
| Description | Spare text box for additional explanation.Translate the given text using the button. |
| Error Message | Custom error message outputted if the policy is not fulfilled. Translate the given text. |
| Owner (Application Role) | Application roles whose members can configure the password policies. |
| Default policy | Mark as default policy for passwords. NOTE: The One Identity Manager password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts or system users. |
Define the following settings for a password policy on the Password tab.
| Property | Meaning |
| Initial password | Initial password for newly created user accounts. If a password is not entered or if a random password is not generated when a user account is created, the initial password is used. |
| Password confirmation | Reconfirm password. |
| Min. length | Minimum length of the password. Specify the number of characters a password must have. |
| Max. length | Maximum length of the password. Specify the number of characters a password can have. |
| Max. errors | Maximum number of errors. Set the number of invalid passwords. Only taken into account when logging in to One Identity Manager. If a user has reached the number of maximum failed logins, the employee or system user can no longer log in to One Identity Manager. You can reset the passwords of employees and system users who have been blocked in Password Reset Portal. For more detailed information, see the One Identity Manager Web Portal User Guide. |
| Validity period | Maximum age of the password. Enter the length of time a password can be used before it expires. |
| Password history | Enter the number of passwords to be saved. If, for example, a value of 5 is entered, the user's last five passwords are stored. |
|
Min. password strength |
Specifies how secure the password must be. The higher the password strength, the more secure it is. The value 0 means that the password strength is not tested. The values 1, 2, 3 and 4 specify the required complexity of the password. The value 1 represents the lowest requirements in terms of password strength. The value 4 requires the highest level of complexity. |
|
Name properties denied |
Specifies whether name properties are permitted or not permitted in the password. If this option is enabled, name properties are not permitted in passwords. The values of the columns for which the Contains name properties for password check option is set are taken into account. Adjust this option in the column definition in Designer |
Use the Character classes tab to specify which characters are permitted for a password.
Table Character classes for passwords
| Character classes | Description |
| Min. number letters | Specifies the minimum number of alphabetical characters the password must contain. |
| Min. number lowercase | Specifies the minimum number of lowercase letters the password must contain. |
| Min. number uppercase | Specifies the minimum number of uppercase letters the password must contain. |
| Min. number digits | Specifies the minimum number of digits the password must contain. |
| Min. number special characters | Specifies the minimum number of special characters the password must contain. |
| Permitted special characters | List of permitted characters. |
| Max. identical characters in total | Maximum number of identical characters that can be present in the password in total. |
| Max. identical characters in succession | Maximum number of identical character that can be repeated after each other. |
| Denied special characters | List of characters, which are not permitted. Specifies whether the password can contain lower case letters. This setting is only applies when passwords are generated. |
| Lowercase not allowed | Specifies whether the password can contain lower case letters. This setting is only applies when passwords are generated. |
| Uppercase not allowed | Specifies whether the password can contain upper case letters. This setting is only applies when passwords are generated. |
| Digits not allowed | Specifies whether the password can contain digits. This setting is only applies when passwords are generated. |
| Special characters not allowed | Specifies whether the password can contain special characters. This setting is only applies when passwords are generated. |
© ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center
