User Management Policy

This screen enables you to change the password life and other details for all users. The password life is the length of time in days the password will be active before automatically expiring.

Rules for all users

Several defaults or ‘polices’ apply to all users. The policies are:

Password expiry period: you specify the number of days after which passwords expire – at the end of that period each user will be prompted to create a new password. This helps reduce the likelihood of users' passwords becoming known to other users. The default is ‘0’ and this has the effect that passwords never expire. The maximum value you can specify is three hundred and sixty-five (365) days. We recommend you specify no more than 90 days
Allow concurrent logins: the default is ‘Yes’ which allows several concurrent logins with the same user-names. However, we recommend you disallow concurrent logins after issuing separate login credentials to each user
Inactive account suspension period: you specify the number of days after which a user profile that has been activated but not used to login successfully, will be suspended. The default is ‘0’ which means that unused user profiles will never be suspended. The maximum value you can specify is three hundred and sixty-five (365) days. After the number of days specified, any user profile that has been activated but not used to login successfully, is suspended. A user attempting to use it would receive a generic message explaining that their login attempt has failed

Setting the password policy for your users

You can decide how long passwords will last before they expire for all users in your system. You can also specify whether users can log in more than once simultaneously from different machines. Also you can specify the number of days after which a user who has not logged in will be suspended.

To edit the Policy screen:

Select Account from the left-hand menu, then click the User Management menu button from the top. This option is available only to users who have the Manage Profile role assigned to them. (Typically this is the Administrator only, since it does not make sense to give all users that can create other users the ability to change defaults that will apply to all users).
Enter the number of days you want user passwords to last before users have to create a new one. Enter 0 (zero) if you don't want passwords to expire at all.
Select Yes if you want to allow your users to log in from two separate laptops or PC's simultaneously using the same login details.
Enter the number of days after which a user who has not logged in will be suspended. Enter 0 (zero) if you don't want any user to be suspended for not logging in.
Click the Save button to store changes.

Guide feedback?
Email us at: guides@worldpay.com