Password requirements
First, you can specify criteria for the content of users' passwords, such as the minimum length and the required characters. On the Minimum Required Password Length attribute to specify the minimum number of characters, and use the Minimum Required non Alpha Numeric Length attribute to specify the minimum number of special characters.
node in the Portal configuration, use theYou can also use regular expressions to define more complex password criteria. You can use either the Password Strength Regular Expression attribute on the node, or use the node under .
The
node also has a child node that you can use to list strings that are not allowed in user passwords.For added security you can specify lockouts for invalid password attempts. Use the Maximum Invalid Password Attempts attribute on the node to specify the number of attempts before a user is locked out, and use the Maximum Lockout Period to specify the number of minutes a lockout will last.
Finally, you can define rules for changing passwords. Use the Maximum Password Age attribute on the node to specify the number of days before users must change their passwords, and use the Password History attribute to specify the number of passwords to store in the password history. Previous passwords cannot be reused until they are cleared from the password history.
See Portal configuration.