Project

General

Profile

Actions

Feature #1384

closed

Support "Password never expires"

Added by Alena Peterová about 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
High
Assignee:
Ondřej Kopr
Category:
Password
Target version:
Start date:
11/19/2018
Due date:
% Done:

100%

Estimated time:
16.00 h
Owner:

Description

Please add a new checkbox "Password never expires" to the user detail. If this checkbox is checked, then the password of that user doesn't expire, even if password policy specifies maximum password age.

If the checkbox is unchecked, then maximum password age applies for the user.

This checkbox can be changed only by administrators with special authorization, e.g. APP_ADMIN. Changes of this property are audited in the audit log for identities.

When "admin" identity is created during the first initialization of CzechIdM, the value of "Password never expires" for this identity will be "true".
All other identities have it by default "false".

Use case:
We have "Maximum password age = 90". After 90 days, the password for "admin" expired, so we can't login to IdM anymore.
We want to set "Password never expires" for admin and other super users, so we don't lose access to IdM anymore.


Files

PasswordNeverExpires.png (49.1 KB) PasswordNeverExpires.png Alena Peterová, 11/20/2018 08:11 AM

Related issues

Related to IdStory Identity Manager - Task #1185: Create endpoint to read metadata about identity passwordClosedOndřej Kopr07/19/2018

Actions
Actions

Also available in: Atom PDF