Appboard/2.5/builder/system administration/password policy

Overview

The Password Policy administration page provides an interface for the AppBoard administrator to view and manage the global password policy. The product also support per-domain password policies but these must be configured via the enPortal administration interface.

To access the Password Policy administration page select the System Administration builder mode and the Password Policy icon.

Password Policy administration page

Password Tab

The User Password Change section defines the behaviour of new users in the system and whether previous passwords can be re-used.

The Password Expiration section allows the administrator to define a password expiration at which point the user is forced to change passwords.

Syntax Tab

Allows for conditions to be set around allowed passwords, such as a minimum length, required characters such as digits or upper case letters, etc...

Lockout Tab

Allows for automatic locking of accounts based on inactivity or login failures.

Domain Specific Policies

Through the main AppBoard administration page it is only possible to configure the global password policy. Switch to the enPortal administration interface to configure per-domain policies. Please note that a Domain policy will take precedence over the global policy.

LDAP Authentication

When using external authentication via LDAP the password policy should mirror the policy defined for the LDAP system. It may be more applicable to apply this policy just to the LDAP Domain, refer to the Domain Specific Policies section above.

Refer to the LDAP Configuration documentation for more information on configuring LDAP including supported features depending on the LDAP server.