Password

Scoping Questions

1. What password complexity rules are required?
2. What is the minimum password length?
3. Is password expiry required? If so, what interval?
4. Should password reuse be prevented?

How To Guide

How To Configure Users, User Roles and User Templates

Configuration Examples

Password Policy

<core:passwordPolicy
  xmlns:core="http://www.enactor.com/core">
  <core:policyId>POS_PASSWORD</core:policyId>
  <core:minimumLength>4</core:minimumLength>
  <core:maximumLength>8</core:maximumLength>
  <core:numericOnly>true</core:numericOnly>
  <core:expiryDays>90</core:expiryDays>
  <core:preventReuse>3</core:preventReuse>
  <core:maxFailedAttempts>3</core:maxFailedAttempts>
</core:passwordPolicy>

User - Password Settings

<retail:user>
  <retail:userId>1100</retail:userId>
  <retail:passwordExpiryTime>0</retail:passwordExpiryTime>
  <retail:forceChangePassword>false</retail:forceChangePassword>
  <retail:strongPassword>false</retail:strongPassword>
  <retail:forceAlphaNumericPassword>false</retail:forceAlphaNumericPassword>
  <retail:forceMixedCasePassword>false</retail:forceMixedCasePassword>
  <retail:preventPasswordReUse>false</retail:preventPasswordReUse>
  <retail:minimumPasswordLength>1</retail:minimumPasswordLength>
  <retail:maximumPasswordLength>20</retail:maximumPasswordLength>
</retail:user>