Screens and Tabs › Tabs › Policy Management Tabs › Password Policy

Password Policy

A password policy is a set of rules and restrictions that determines how passwords are created and when they expire. In a password policy, you can configure the following settings:

Note: SiteMinder includes advanced password policies, which allow you to configure additional rules and password restrictions. To create advanced password policies, you configure integration between SiteMinder and Identity Manager.

• General Settings—Define the basic properties for the password policy.
• Password expiration—(Requires SiteMinder) Define events, such as a number of days elapsing or a number of failed login attempts, that cause a password to expire. When a password expires, the user account is disabled.
• Password composition—Specify the content requirements for new passwords. For example, you can configure settings that require users to create passwords which are at least eight characters long and contain a number and a letter.
• Regular expressions—Provide an expression that determines the format of a valid password. You can specify whether passwords must match or not match that format.
• Password restrictions—(Requires SiteMinder) Set limits on password reuse. For example, users must wait 90 days before reusing a password.
• Advanced password options—Specify actions that Identity Manager should take, such as making passwords lower case, before processing a password. You can also specify the priority of a password policy, if multiple password policies apply.