CloudSSO:Configure a password policy

Procedure

1. Log on to the CloudSSO console.

2. In the navigation pane, click Settings.

3. On the User Setting tab, in the Password Policy section, click Edit.

4. In the Password Policy dialog box, configure the password policy parameters.

   Parameter	Allow modification	Description	Default value
   Password Length	Yes	Minimum password length. Valid values: 8 to 32 characters.	8
   Different Characters	Yes	Minimum unique characters required in a password. 0 disables this check. Maximum bounded by the Password Length. To enable, select Enable and specify the count. Example: if set to 3, passwords like abc or aabbccdef are valid, but abb is not (only two unique characters: a and b).	3
   Do Not Contain Username	Yes	Prevents the password from containing the username. Select Enable to activate.	Do Not Contain Username
   Max Age	Yes	Password validity period. Valid values: 1 to 120 days.	90
   Do Not Repeat History	Yes	Number of recent passwords that cannot be reused. Valid values: 0 to 24. To enable, select Enable and specify a count. 0 disables this restriction. Note This restriction does not apply to passwords changed before January 5, 2024.	1
   Max Attempts	Yes	Maximum failed sign-in attempts before the account is locked for one hour. Valid values: 0 to 32. To enable, select Enable and specify a value. 0 disables this limit.	5
   Character Types Required in Password	No	Requires lowercase letters, uppercase letters, digits, and special characters.	Lower case Upper case Number Symbol
   Disable Login After Password Expired	No	After password expiration, the user cannot log on to the CloudSSO user portal and must contact the CloudSSO administrator to reset the password.	Deny Logon

5. Click OK.

Result

The configured password policy applies to all subsequent password operations, including setting passwords for new CloudSSO users and changing passwords for existing users.

References

• Create a user

• Reset the password of a user