Operational sites with Feature=Passwords active will have the following Options available via Setting=Password:
- Enforce
- For Feature=PasswordInterval, the Enforce value (when set to 1) will require a User with an Expired password to set a new, acceptable Password prior to being permitted to utilize any Private area pages, except Services: Profile. Default is "0" or not Enforced.
- History
- Establishes the number of generations of prior passwords that are retained to make sure Users pick "new" and avoid previously used Passwords. This Option is supported on Version 6.0 and higher systems. Default is "10".
- Interval
- For Feature=PasswordInterval, this specifies the maximum permissable time period before the User is required to set a new Password. Once the length of time has been achieved since the last Password change, the User will be prompted to choose a new password after the next successful logon. Default is "n/a" or no Interval (Password never expires).
- ResetPeriod
- Establishes the length of time (interval) that a Password Reset URL will remain valid. The period is computed at the point in time the ResetPassword is done and efforts to use the PasswordReset URL after that will be rejected. Default is "1 hour".
- Strength
- For Feature=PasswordStrength, this establishes the minimum score that must be reached through Password evaluation before the system will accept a User selected password as being sufficiently complex to protect the User's privacy. Default is "40".
- StrengthDisplay
- For Feature=PasswordStrength, this sets the system default for the display of the Password Strength detail when the new Password form is displayed. The User can change this at execution time by clicking the and symbols present after the section title. Default is "1".
- Suspend
- Establishes the interval of time from a User being Locked to the system automatically unlocking (permitting) the User to logon again (when Feature=LockRelease is implemented). Default is "+1 day".
- Tries
- Establishes the number of consecutive Logon failures that will be acceptable before the system will suspend the User. The User will be "Locked" (prohibited) from attempting to logon again until either the Suspend interval has elapsed OR the User initiates Password Reset. Default is "5".
- Warning
- For Feature=PasswordInterval, this specifies the period of Time prior to the Expiration that the User will be warned that the Password is about to expire. Default is "5 days". Leave this operand unspecified or set to null to disable the Warning completely.
For installations making use of the Password Reset without using Email, the following operands apply:
- ResetCookie
- Indicates whether a Cookie from the Site for the User must be present on the requesting system (1) or not (0) before Password Reset is available to the system. Default is "".
- ResetDepth
- The number of choices presented in the Logon: Password Reset pulldowns for each Question. Default is "".
- ResetOmit
- Set the potential (in percentage) that Logon: Reset Password will randomly omit the User's choice from the pulldown for a Question (0 means never, 100 means always). Default is "".
- ResetQuestions
- Establishes the number of Questions that Logon: Password Reset function will prompt with. Default is "".