User Security - Passwords

The User Security tab of the preferences area allows a System Administrator or Security Administrator to configure standard and enhanced password security for users.

 

Example of Password Preference Functionality:

 

  1. Create a new user (Ex: CCHIT) via Edit > Preferences > Users.



     

  2. When a new user is created the default password is always set to "password."
     

  3. Upon initial login the user is prompted to change their password. Failure to do so will result in the user being unable to login to the application.



     

  4. Once the user sets a new password they gain access to the application.
     

  5. The system administrator changes the User Security Preferences via Edit > Preferences > User Security and clicks the Enhanced option which enables the Enhanced Security Settings.
     

  6. Under Enhanced Security Setting the system administrator selects Check previous <value> password(s). Selecting this option will not allow a user to change their password to one they previously used in the last 1, 2, 3 times.



     

  7. The system administrator changes the password which will prompt the user to select a new password upon login as shown below:



     

  8. When the user attempts to login they are again prompted to enter a new password.



     

  9. If the user attempts to use a password that was previously used within the value set in the Preferences they will receive a message that their password has expired and will be prompted to enter a different password that was not used within the past password change cycles.