Name

String

Default Password Policy

The name of the password policy

Change at first logon

Bool

true

Whether or not the user must change his password upon the first logon

This option overrides the setting that can be set on the Active Directory target system

This option can be overwritten in the Active Directory identity provisioning configuration

Password expiration rule

DropDown

An optional password expiration rule

Enforce password policy on logon

Bool

true

Whether or not the users password should be checked against the current password policy upon logon. If the password does not meet the criteria of the password policy, the user is forced to change his password.

Check against password blacklist

Bool

true

Whether or not the password should be checked against a blacklist. For details, see the black list section further down the documentation.

Check against current password

Bool

true

Whether or not the password should be checked against the current password upon a password change. This check is performed in the target system itself and will therefore affect the execution times of a password change.

Force change when password on the black-list

Bool

true

If enabled, the user will be asked to change his password if it’s on the black list. If disabled, the user will be presented with a warning instead.

How many previous passwords to check

Unsigned Integer

1

The amount of password hashes that are kept in the system to check the new password against. If set to 0, none will be kept.

[ "[A-Z]" ]

Global.Validation.Password.Uppercase

Please enter at least one capital letter

[ "[a-z]" ]

Global.Validation.Password.Lowercase

Please enter at least one lowercase letter

[ "[0-9]" ]

Global.Validation.Password.Number

Please enter at least one number

[ "[^A-Za-z0-9]" ]

Global.Validation.Password.specialcharacter

Please enter at least one special character

[ ".{8,32}" ]

Global.Validation.Password.8To32Characters

Please enter between 8 and 32 letters

[ ".{10}" ]

Global.Validation.Password.DoesNot10charcacter

Please increase the password length to min. 10 character