Question
equensWorldline
DE
Last activity: 3 Aug 2016 11:24 EDT
PegaWORKS 8.1.x Password complexity
My Security Department criticized the complexity of passwords in our PEGAWorks 8.1.x installation. We currently use the PegaWorks own user / password management.
How can I solve the two red points to satisfy the requirements?
| Requirement | |
|---|---|
| password length >=8 characters | COMPLIANT |
|
password complexity: at least one lower letter, one capital letter and one number or special character |
NOT COMPLIANT |
| password history of 25 passwords |
NOT COMPLIANT |
|
the user must be able to change his password at any time |
COMPLIANT |
best regards,
mirko
My Security Department criticized the complexity of passwords in our PEGAWorks 8.1.x installation. We currently use the PegaWorks own user / password management.
How can I solve the two red points to satisfy the requirements?
| Requirement | |
|---|---|
| password length >=8 characters | COMPLIANT |
|
password complexity: at least one lower letter, one capital letter and one number or special character |
NOT COMPLIANT |
| password history of 25 passwords |
NOT COMPLIANT |
|
the user must be able to change his password at any time |
COMPLIANT |
best regards,
mirko
Accepted Solution
Pegasystems Inc.
IN
HI Mirko,
The security policy can be achieved by implementing the External Password Authentication mechanism.
The Pega works help document describes the configuration under "Custom User Validation" heading.
By this approach the pasword and user name are stored in an external database and the password supplied by the User on Pega signon screen are validated against the external database.
Upon successful validation the success status is returned which allows the user to sig in to Pegaworks.
Pegasystems Inc.
US
Hi Mirko,
Can you create a Support Request for this issue as it requires some investigation and code analysis to provide you with the feasibility?
Thanks,
Sibasis
Pegasystems Inc.
IN
Hi Mirko Seidel ,
Thank you for sharing the SR details on the thread, I have tagged it along with the issue description for better tracking.
~Vidyaranjan A V | Community Moderator | Pegasystems Inc.
Hi Mirko,
Thank you for sharing the SR details.
You will receive detailed updates on regarding the limitation and possible workarounds in PegaSYSTEM 8.1.x from the SR communication separately.
Thanks
Abhijit
Accepted Solution
Pegasystems Inc.
IN
HI Mirko,
The security policy can be achieved by implementing the External Password Authentication mechanism.
The Pega works help document describes the configuration under "Custom User Validation" heading.
By this approach the pasword and user name are stored in an external database and the password supplied by the User on Pega signon screen are validated against the external database.
Upon successful validation the success status is returned which allows the user to sig in to Pegaworks.