Forum - Password Expiry and Minimum Spec

Password Expiry and Minimum Spec

4-25-24

Operating system: Windows

Afternoon,

Some of our customers haven't changed their passwords for a while but they're not getting any password expiry message. If I copy their Standard ID into a new user on some test data and try and login, I then get the password expired message from the Standard ERP Client which then takes me to the MyStandard expired password web page. Why doesn't it do this for the customer on their system?

Whilst I'm here, can anyone tell me what the password expiry time is set to now, is it still 2 years?

Can I also ask what is the minimum specification for Standard ID passwords please?

And do dot (.), pound sign (£) and asterix (*) symbols still cause issues if used in a Standard ID password?

Sorry for all the questions, happy to split into separate questions if it helps.

Thanks

Best wishes

Dave Briggs

4-29-24

Hello Dave!

Regarding Standard ID password expiry. Does the users have ticked checkbox on person record "Password never expires"? By activating this all users should message to reset password.

Password expiry time is according to our documentation 1 year. Only password restriction for Standard ID is 8 characters. About special characters I need to check status and get back on that topic.

Brgds,
Rasmus

4-29-24

Created by09:49 29 Apr 2024

Hi Rasmus,

We use Global Users as apposed to the Persons but No, the users don't have "Password never expires" ticked - none of our users do.
So are you saying we should have this ticked all the time and then the user will get a message saying their password has expired?
It's just it doesn't seem logical to me? - having "Password never expires" ticked sounds like we don't want them to get a password expiry email as it sounds like we never want the password to expire.
Can you explain a little further for me please?

Thanks

Best wishes

Dave

4-30-24

Hi Dave,

Correction to my previous statement. "Password never expires" obviously means that these users won't get messages about renewing their passwords.

Apologies for incorrect reply.

Best regards,
Rasmus

6-12-24

Created by09:32 30 Apr 2024

Hi Dave, Correction to my previous statement. "Password never expires" obviously means that these users won't get messages about renewing their passwords. Apologies for incorrect reply. Best regards, Rasmus

Hi Rasmus,

Thanks for this and for clarifying your previous statement.

Any update on my questions above please? i.e.

1. Why don’t existing users get a password expiry message?
2. Do dot (.), pound sign (£) and asterix (*) symbols still cause issues if used in a Standard ID password?

Thanks

Best wishes

Dave

6-25-24

Hi,

Just to clarify - system password (which is affected by the setting Password Security in System module, just as the checkbox "Password never expires" is totally separate thing as StandardID and its password.
Basically each user in the system has 2 password - StandardID password and another local - system level - password.
When you create new user and system asks you to change the password, I am quite certain we are talking about System level password change, not StandardID password change.
good question, though, is why you are not getting requests to periodically update StandardID password - you should.
Can you provide at least one StandardID (e-mail address) so we could investigate why the user has not received request to change its password?

Regarding special characters used in the password - there shouldn't be any. If there are, please reach out to me with a bug report and I will get it fixed.

Martins.

Back to the list

New Message
Open Questions My Questions