Configuring a Custom Password Policy

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

You can customize a password policy to directly impact certain user groups or attributes to create a curated user experience.

Requirements

Access to your RapidIdentity administrator portal

  1. Navigate to your RapidIdentity administrator portal.
  2. From the module selector, choose "Configuration".
  3. In the Policies section, click Password.
  4. Click Add Policy.
  5. Add a name to identify the policy.
  6. In the Setup Instructions field, configure how the user is prompted to set or reset their password.
  7. Select from the Access Control drop-down if you want this policy to only apply to a specific attribute or user group.
    1. If you select Attribute-based, enter the relevant LDAP filter you want to target.
    2. If you select Group based, select the groups you want to target.
  8. Configure toggles from the Password Reset section to customize the password reset behavior for the target attribute or group.
  9. Modify the Password Expiration settings to customize the length of time a password can remain the same, along with the number of days prior to expiration user will be notified they must change their password.

    The age of a user's password is evaluated during the initial login after configuring the password expiration setting. The Changed Password Date (pwdLastSet) compares with the Password Maximum Age setting to confirm if the password is still valid or if the user must change their password during the next login. If the Password Maximum Age setting is modified after enabling the policy, the modified value is used during a comparison with the Changed Password Date (pwdLastSet) value.

    Note:

    If a user's password is over 365 days old, they will receive a prompt to change their password during their next login after configuring the Password Expiration setting, regardless of the set value.

  10. Click Save.
  11. In Password Syntax, adjust the minimum and maximum required values for uppercase letters, lowercase letters, numbers, special characters, and unicode characters.
  12. In Restricted Passwords, set phrases that are not allowed to be used as a password and enable or disable password reuse.

    The phrases can be matched with exact text, general expressions, or attribute values.

  13. In the Password Screening tab, enable a third-party service to present users with an error message when their entered password is detected from a known data breach.
  14. In Account Lockout Policy, restrict user accounts after multiple failed attempts to authenticate with their credentials.
  15. In General, click Enable and then click Save.

The custom password policy applies to the target group.