Notification for password expiry PEGA 8.5.6
Our client wants to implement a password expiration for users who hasn't change their password for 90 days. We found it is configurable thru:
OOTB configuration for user to force to change password after 90 days.
-
In Configure → Org & Security → Authentication → Security Policy set Maximum operator password age in days = 90
Business also wants us to notify user via email 7 days before the user password expire.
My question is do we have an OOTB function that does this? We found we can get the recent password change in pzPasswordHistory from Data-Admin-Operator-ID. But would just like to ensure we are not missing any OOTB function we can use.
Thanks in advance.
Cognizant
PH
The automatic expiry of password and force user to change password is an existing feature of PEGA.
For the email notification, we did a custom way to achieve the functionality by writing an activity that computes the password age then compare it to Declare_AuthPolicies.pyMaxOperPwdAge - if will expire within 7 days then an email will be triggered. This is run daily via job scheduler.
Ford Motor Company
US
@JillMC I would recommend move away from using Pega stored Passwords and use External Authentication.
Updated: 27 Jul 2023 4:17 EDT
Cognizant
PH
Yes I agree, most of the user in our system is already external authenticated but it's a client requirement that some user profile uses form authentication to login into the system. I believe this is fine as long as security policies within the PEGA system is enabled and aligned to your business security policy. (e.g. password complexity, password expiry etc)
Regards,
Jill