The Auth system properties allow you to view user password configuration parameters. You can change some of these parameters, while you can not change others.
To access the Auth system properties:
Go to Administration > Settings > System properties.
Click the auth-api menu item in the content menu to open the auth system properties setting page.
Below is a detailed explanation of the user password configuration parameters.
Users often rotate their passwords, and this parameter restricts such rotations by defining how many unique passwords a user must create before they are allowed to reuse a previous one.
Note: The minimum allowed value is 5, and the maximum is 24.
The boolean parameter determines whether a password must include numbers. Selecting Yes requires the password to contain at least one numerical character. No allows passwords without any numerical characters.
Note: This parameter is defined by Tuum and cannot be changed.
The boolean parameter specifies if the password must include lowercase letters. Yes requires the password to contain at least one lowercase letter. No allows passwords without any lowercase letters.
Note: Tuum sets this parameter, and you can not change it.
The boolean parameter specifies if the password must include one of the special characters listed in brackets (@#$%). Yes requires the password to contain at least one special character is required. No allows passwords without any special character.
Note: This parameter is defined by Tuum and cannot be changed.
The boolean parameter specifies if the password must include uppercase letters. Yes means at least one uppercase letter is required. No means the password can be without any uppercase letters.
Note: This parameter is defined by Tuum and cannot be changed.
The value specifies the maximum number of characters allowed in the password.
Note: The maximum allowable value is 128.
The value defines the minimum length of the password.
Note: The minimum allowed value is 12.
This value defines the maximum duration a password can remain valid before expiring.
Note: The minimum allowed value is 3, and the maximum is 90.
The value indicates the maximum number of seconds an access token can remain valid before it expires.
Note: The minimum allowed value is 300, and the maximum is 3600.



