Security Policies

Registration Guidelines

Maximum number of failed login attempts

Here, you specify how many times a user can attempt to log in if a login attempt fails, for example, due to an incorrect password.

If the number of failed login attempts exceeds the value entered here, the corresponding user account will be locked.

In the "Users" module, you'll find the "Login Attempts" data field, which stores the number of failed login attempts, in the Schema Manager.

Password Policies

Minimum password length

Specifies the minimum number of characters required for a password. If you create a password that is shorter than the minimum length, a message will be displayed.

Allowed Characters

Here, you define which characters may be used in passwords.

Illegal Symbols

Here, you can exclude the characters that are not allowed in passwords.

Reject if the regular expression matches

You can enter an expression here to check the password for unauthorized characters. For example, if the expression ^([A-Za-z0-9ÄÖÜäöü]{6,40})$ is entered in the corresponding field to the right of the setting, passwords with six to 40 characters that contain uppercase and lowercase letters as well as uppercase and lowercase umlauts would not be allowed.

Check for repetitions using a regular expression

Allows you to limit the number of times a specified portion of the password may be repeated within the password.

Reject passwords found in the dictionary

With this setting, passwords consisting solely of common words, such as "flower" or "birthday," will be rejected.

Reject passwords that have already been used

Passwords that have already been used are not allowed. You can also specify whether all passwords or only the most recent ones should be rejected.

Reject letter sequences

Ensures that passwords containing letters in sequential order (such as "ABC") are rejected.

Reject number sequences

Ensures that passwords containing consecutive numbers (such as "123") are rejected.

Prohibit Usernames in Passwords

Rejects passwords that contain the username.

Reject spaces

Prevents passwords that contain spaces.

Accounting Policies

The settings available here serve as default values when creating new users. They will not be transferred to existing accounts if changes are made.

Password is about to expire

Here, you specify that a password has the expiration date set in Password Management.

The user must change their password the next time they log in.

This setting causes the user to be prompted to enter a new password when logging in with an expired password.

User cannot change password

You can also configure the system so that a user is not allowed to change their password. To do this, the link used to change the password is hidden in the login dialog.