How to Manage User Security
This document details the updates made to the SnapFulfil security policy which affects user password criteria and account expiry.
1 New Password Criteria Options
In order to provide the varying requirements for password strength new options have been introduced to cater for this. These new options are not mandatory if a customer requires simple password control.
SnapFulfil can now configure the below options depending on customer requirements. The available options are set out below:-
|
Criteria |
Use |
|
Lower |
Determines minimum no of lower case alpha characters (if any) |
|
Upper |
Determines minimum no of upper case alpha characters (if any) |
|
Number |
Determines minimum no of numbers (if any) |
|
Special |
Determines minimum no of special characters (if any) |
|
Special Chars |
Determines allowed and not allowed special characters NOTE – Due to system compatibility, the below special characters cannot be used within a password: £ pound sign ~ tilde sign ¬ not sign |
2 Password Length
The current minimum number of password characters is 8 and the maximum is 15. This can be configured to meet customer requirements.
3 Password Validation
- The password must not contain any part of the user or login name.
- The password must not match the previous 3 passwords.
- 4 consecutive characters within the password must not match 4 characters of the previous 3 password. For example,
SnapFulfil1234 cannot be changed to Password1234 due to 1234 matching on both passwords consecutively.
4 Error Messages
Error messages will be displayed if a password being created does not meet any of the above criteria.
|
Error |
TEXT |
|
LOWER |
Invalid no of lower characters |
|
MINLENGTH |
Input too short |
|
NUMERIC |
NUMBER |
|
SPECIALCHAR |
Invalid character |
|
SPECIALNUMBER |
Invalid no of special characters |
|
SPECIALSPACE |
Invalid character* |
|
TEXT |
Invalid text** |
|
UPPER |
Invalid no of upper characters |
|
Validation |
Password must not contain user\login name or 4 consecutive chars from previous Password |
* This message is displayed if space is entered in a password
** This message is displayed when the invalid characters documented in section 2 are entered