The Auth system properties allow you to view user password configuration parameters. You can change some of these parameters, while you can not change others.
To access the Auth system properties:
Go to Administration > Settings > System properties.
Click the auth-api menu item in the content menu to open the auth system properties setting page.
Below is a detailed explanation of the user password configuration parameters.
NUMBER_OF_PREVIOUSLY_USED_PASSWORDS_NOT_ALLOWED
Description
Specifies the number of previously used passwords that cannot be reused as a new password.
Explanation
Users often rotate their passwords, and this parameter restricts such rotations by defining how many unique passwords a user must create before they are allowed to reuse a previous one.
Note: The minimum allowed value is 5, and the maximum is 24.
PASSWORD_CONTAINS_DIGIT
Description
Password must contain a digit.
Explanation
The boolean parameter determines whether a password must include numbers. Selecting Yes requires the password to contain at least one numerical character. No allows passwords without any numerical characters.
Note: This parameter is defined by Tuum and cannot be changed.
PASSWORD_CONTAINS_LOWER_LETTER
Description
Password must contain a lowercase letter.
Explanation
The boolean parameter specifies if the password must include lowercase letters. Yes requires the password to contain at least one lowercase letter. No allows passwords without any lowercase letters.
Note: Tuum sets this parameter, and you can not change it.
PASSWORD_CONTAINS_SPECIAL_CHARACTER
Description
Password must contain a special character (@#$%).
Explanation
The boolean parameter specifies if the password must include one of the special characters listed in brackets (@#$%). Yes requires the password to contain at least one special character is required. No allows passwords without any special character.
Note: This parameter is defined by Tuum and cannot be changed.
PASSWORD_CONTAINS_UPPER_LETTER
Description
Password must contain a uppercase letter.
Explanation
The boolean parameter specifies if the password must include uppercase letters. Yes means at least one uppercase letter is required. No means the password can be without any uppercase letters.
Note: This parameter is defined by Tuum and cannot be changed.
PASSWORD_MAXIMUM_LENGTH
Description
Maximum length of a password.
Explanation
The value specifies the maximum number of characters allowed in the password.
Note: The maximum allowable value is 128.
PASSWORD_MINIMUM_LENGTH
Description
Minimum length of a password.
Explanation
The value defines the minimum length of the password.
Note: The minimum allowed value is 12.
PASSWORD_VALIDITY_DAYS
Description
Specifies the number of days after which a new password must be set.
Explanation
This value defines the maximum duration a password can remain valid before expiring.
Note: The minimum allowed value is 3, and the maximum is 90.
TOKEN_EXPIRY_TIME_SECONDS
Description
Token expiry time in seconds (cached for 30 minutes).
Explanation
The value indicates the maximum number of seconds an access token can remain valid before it expires.
Note: The minimum allowed value is 300, and the maximum is 3600.
