Who is this article for?

Users and administrators with Ideagen EHSQ Enterprise or Decani who manage user password policies.

Appropriate administrative permissions are required.

Overview

You can combine multiple password rules to create a password policy that aligns with your organization’s password requirements and security standards.

On the administrative Preferences screen, system administrators can configure password policy rules.

Password Rules

• Minimum length: The length of a password is a fundamental factor in determining its strength. Security professionals recommend a minimum of eight characters.
• Maximum length: The typical maximum length for passwords is generally 64 characters.
• Minimum number of numeric characters: Digits ranging from 0 to 9.
• Minimum number of alphabetic characters: Letters from A to Z.
• Minimum number of lowercase characters: Also referred to as small letters (a, b, c, etc.).
• Minimum number of uppercase characters: Also referred to as capital letters (A, B, C, etc.).
• Minimum number of non-alphanumeric characters: Special symbols such as dashes or dollar signs, excluding numbers and alphabetic characters.
• First character must be numeric: Digit from 0 to 9. No value is required.
• First character must be alphabetic: Letter from A to Z. No value is required.
• First character must be non-alphanumeric: A special symbol such as a dash or dollar sign. No value is required.
• Last character must be numeric: Digit from 0 to 9. No value is required.
• Last character must be alphabetic: Letter from A to Z. No value is required.
• Last character must be non-alphanumeric: A special symbol such as a dash or dollar sign. No value is required.
• Password expires every (in days): Passwords typically expire every 60 to 90 days.
• New users must change their password upon first login: A security measure to ensure that the password is not known by any other party. No value is required.
• Forbidden character: A security measure that prohibits the use of specific characters or character sequences.
• Forbidden password: A security measure that prevents the use of certain passwords.
• Failed login attempts before lockout: A security measure that limits the number of unsuccessful login attempts to deter potential attackers from making multiple random attempts.

Caution when applying a rule more than once

You can apply rules such as Forbidden Character and Forbidden Password more than once. Applying other rules multiple times may produce conflicting results.

Expire All Passwords

Administrators can require all users to change their passwords the next time they log in by selecting Expire All Passwords. This can help protect accounts when credentials may have been compromised.

Further reading

• Understanding Single Sign-On (SSO) settings
• Configuring area preferences