8,849
edits
Changes
no edit summary
'''Password Policy''' is used to control the length and complexity of passwords, password expiration and history, the number of retries that the [[User|user]] is allowed, and the lockout time for the account if they exceed the number of retries.
==Password Activation Settings==
Password Activation Settingscan be set to add an extra layer of security to the system. These settings pertain to users who use the "Forgot Password" link on the login page.
[[Image:Password-Activation-Settings.png]]
* '''Default Security Code''' -
* '''Activation link life span''' - The duration that Works with the activation link will be valid@activationlink@ [[Password Variables to Set or Reset User Passwords|password variable]]. The activation link variable can be used in the "Forgot password" email template using If the following syntax: '''http://@url@@activationlink@'''syntax is used in the ''Request Password'' section of [[User Email Templates]], this setting sets the duration that the activation link will be valid.
* '''Challenge Questions, delimited by semi-colons''' - You can set a series of challenge questions, all users will be prompted to select a Challenge Question on next login. Their answer will be stored and they will be prompted to enter this answer if they forget their password and click the activation link in the "Forgot password" email template.
=See Also=
* [[Custom Password Policy Examples]]
* [[Password Variables to Set or Reset User Passwords]]
[[Category:Global Settings]][[Category:Security]][[Category:System Auditing]]
