Set User Password Policy

Password Policy controls user password requirements for all users in your Grant Lifecycle Manager (GLM) or Scholarship Lifecycle Manager (SLM) site. Requirements configured in this setting apply to all roles when users set or reset their password. 

User Role: Administrator

Use Password Policy to:

• Require specific character types in user passwords.
• Set a password expiration period for your site.
• Require two-factor authentication for specific user roles.
• Configure the maximum number of failed login attempts before a user is locked out.

Enable the User Password Policy Setting

To enable and configure the User Password Policy setting in GLM/SLM:

1. Click the gear icon in the upper-right corner. 
    

2. Click the pencil icon next to the User Password Policy setting.

    

3. Make the necessary edits and selections, and then click Save.
   • Password Policy Enabled - If checked, the configurations in this setting go into effect. 
   • Include These Character Types - Character types that a user can include in their password.
   • Expire Days - The number of days after which users are prompted to reset their password.
     • The default for this is to never expire, which is the industry recommendation. 
     • A password expiration should only be used if required by the organization's password security policy.
   • Two-Factor Auth Roles - Check the box next to a role to require two factor authentication for users with that role.

   • Max Failed Attempts (Always Enforced) - The maximum failed attempts allowed for users to enter their password when logging on. 

     • After reaching this limit, the user will be locked out of their account and prompted to reset their password.
     • The number entered into this field goes into effect even if Password Policy Enabled is not checked.