Password Policy - Include or Exclude Characters

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

We are exploring OOTB options to setup password policy to include/exclude characters for generating password during create provisioning policies. Are there any OOTB ways of doing this ? or should we build custom method and refer it in provisioning policies?

2

Hi @mckiran12 - If you are generating passwords as part of a create account policy, you can use a field value rule to generate it according to your design. With a java method you decide what is included/excluded when the password is generated. Make sure it also meets the minimum requirements of any password policy in place on the target system. You could use something like this to define what’s included and then call it in your generate method:
String UPPER = “ABCDEFGHIJKLMNOPQRSTUVWXYZ”;
String LOWER = “abcdefghijklmnopqrstuvwxyz”;
String DIGITS = “0123456789”;
String SYMBOLS = “!@#$%&*()-_=+{};:,.<>/?”;

3

In IdentityIQ Settings -> Passwords -> Define Character Types, you can specify those things globally.

image
image1392Ă—448 24.3 KB

4

Is this for identity cube password policy? or can it also be used for application password policy?

5

It should apply to any password generated by IIQ. If it’s for an application, IIQ should be calculating the effective policy for the generated password based on all configured PasswordPolicy objects that apply to that application for the account requesting it plus the global policies in the system configuration that this sets.