With 探花大神's Password Policies, you can implement targeted security strategies by creating unique password policies for different user groups. This is a list of frequently asked asked questions related to Password Policies.
This feature allows admins to create multiple, customized password policies. Instead of a single, organization-wide rule, you can now set different policies with tailored complexity, aging, reuse, and recovery settings to fit various user needs or security requirements. See Get Started: Password Policies to learn more.
A new Password Policies section is now available in the left navigation under Security Management, offering an enhanced experience for managing custom password policies. Admins can now tailor policies by user group, using a familiar configuration interface.
It will automatically become the default policy as you add your first custom password policy by user group.
Yes, you can choose to only use and modify the default policy as you do it today. Go to Settings > Security > Password Settings. See Manage Password and Security Settings to learn more.
By associating them with user groups. You'll link specific user groups to the desired custom password policy.
Once the custom password policy is saved, the settings of the policy will take effect only when
- User resets the password
- Admin force resets the password
- An expiration Schedule is upcoming that warrants the password reset
Yes, if they share the same password requirements.
It is recommended to create a group of users based on roles or departments or functions with distinct password security needs.
The first best matching policy will be enforced based on the defined policy precedence.
Policy Precedence is a setting where admins can order custom policies to determine which takes priority for users in multiple groups. There will be a setting to edit the policy precedence under the 鈥淧assword Policies鈥 section that will allow you to manually customize and set the order of policies. See Setting Policy Precedence to learn more.
When a user who was under the default policy is added to a new custom policy, once the custom policy is saved, the settings of the policy will take effect only when:
- User changes the password
- Admin force changes the password
- Expiration Schedule is underway
Until the above mentioned scenarios are enforced, the users continue to adhere to the default policy
This can be done in 2 ways.
- Login to the .
- Go to Security Management > Password Policies and click the default policy link. It will open a new browser tab where you can make changes and save.
- The other way would be to directly go to Settings > Security > Password Settings and make changes like you do today.
Users who are not part of any user group associated with a custom password policy are subject to the password settings of the Default Policy. It acts as a safety net, so no user in the org exists without a password policy requirement.