Creating Password Complexity Rules

Out-of-the-box, LearnCenter comes with a Default Password Complexity Rule, but you can add your own. Password complexity rules are used to require that specific types of characters be used a specific number of times within the chosen password pattern (occurrence or sequence). Each specific combination of these requirements defines a single complexity rule.

You can give each complexity rule a name and a description. You can have a pool of complexity rules for your LearnCenter and rotate through the variations to add yet another dimension of password security, but only one complexity rule at a time can be implemented. The complexity rule in effect at the time a user makes a password change is the rule that governs the new password's creation and use until that user's next password change.

As you create the complexity rules that govern your LearnCenter, keep in mind that user passwords are considered one of the most vulnerable breach points when it comes to system security.

The first step in creating a password complexity rule is to choose its pattern requirement:

• Occurrence - requires certain types of characters but does not specify their order.
• Sequence - requires certain types of characters and does specify their order.

If you are experienced in writing JavaScript™-compliant regular expressions, you can choose an alternate method of creating a complexity rule:

• Manual - you type in the JavaScript™-compliant regular expression that defines your complexity rule.

Default Password Complexity Rules

If you are brand new to LearnCenter, there is a default complexity rule. You can later add your own (see below). The default complexity rule does the following:

• Enforces at least one uppercase, one lowercase, and one numeric character.
• Enforces passwords be a minimum of 8 characters in length.
• Expires passwords after 180 days.
• Ensures that temporary passwords emailed to Users contain uppercase, lowercase, numeric and punctuation characters, and will have the minimum and maximum length specified in the system settings.

Adding Your Own Complexity Rules

You can add your own password complexity rules. Before you begin, see the topic called Strong Passwords for recommendations on creating passwords that are difficult to breach. Follow these steps to create an occurrence-type password complexity rule:

On the ControlPanel:

1. Click on the Options menu to expand it.
2. Click Security.
3. Scroll down if necessary to view the Password panel.
4. Click Manage Rules.

All sets of complexity rules are listed here.

5. Click Add Rule.
6. Type a Name for the rule. 
7. Type a Description for the rule.
8. Select one of the following for Rule Type:

• Occurrence
• Sequence
• Manual

Once you create a complexity rule, you cannot modify its rule type. This is the only aspect of a rule that cannot be changed later.

4. Click Save.

See Also

Copyright © 2010-2015, Oracle and/or its affiliates. All rights reserved.