Hi! I have a case were the customer wants to give access to S&M 7 Web to both AD users and external users. Naturally the system administrtor wants to set a minimun password strength (number of characters and complexity) on SuperOffice authentication for users without AD authentication.
I think I have heard a rumor that this was possible in 6.3, but were do you set it?
I have looked through all perefernces (even the hidden ones) but can't find it.
Current version: SuperOffice S&M Web 7.1 B3
Any suggestions or have I been dreaming?
All Replies (6)
hey.
i dont think (atleast, I have never seen it) that you can do that in SOWeb.
You can do it in CustomerService (ejournal). thou under Settings-> System -> Password
Hi Göran, yes, this was implemented as a hidden preference in 6.3.1.175, a hotfix version between 6.3 and 6.3 SR1.
You need to add a row to crm5.userpreference;
prefsection = System
prefkey = PasswordPolicy
prefvalue = "MinTotal=7&MinNum=1&Msg=Password must be at least 6 chars and 1 number"
where MinTotal is the minimum length, and MinNum is the minimum count of numbers.
From CRM 7 the password policy must be handled by AD, the red alert Frode refers to was just for 6.3 while waiting for 7 to be released.
Hi!
The posibillity to set a password strength is now avalible in the released version of 7.1. It is an open preference under system and you can set it as shown below:
"Minimum length and contents of passwords. Format: type=value&type2=value2&... types: MinTotal (minimum total length); MinNum (digits 0-9); MinLC (lowercase characters); MinUC (uppercase characters); MinSpec (any other, special characters). Each value defines the minimum number of characters of the type. Undefined values default to 0. Msg=text defines the text shown to the user, for passwords that do not fulfill the requirements, instead of the standard system message."
Works great in Admin and in S&M Win. In S&M Web it only displays "wrong password" if the password strength is not fullfilled.
Thanks R&D for adding this! :-)
How about a manadtory expiration date? Can I set the password to expire e.g. every 3 months? I cannot use AD, as our userbase consists of users in various location (and in 5-6 different AD's)
Henrik
P.S. Running 7.5