Creating a new password policy - PingDirectory

Page created: 26 Jul 2021 |

Page updated: 14 Jan 2022

| 1 min read

9.0 Product PingDirectory Directory Capability Product documentation Content Type Administration User task IT Administrator Administrator Audience Software Deployment Method

To create a new password policy:

Run dsconfig in interactive or non-interactive mode.
Use the administrative console.

This example demonstrates creating a new policy using dsconfig in non-interactive mode.

$ bin/dsconfig create-password-policy \ 
  --policy-name "Demo Password Policy" \
  --set "password-attribute:userpassword" \ 
  --set "default-password-storage-scheme:Salted SHA-256" \
  --set "force-change-on-add:true" \
  --set "force-change-on-reset:true" \ 
  --set "password-expiration-warning-interval:2 weeks" \
  --set "max-password-age:90 days" \
  --set "lockout-duration:24 hours" \ 
  --set "lockout-failure-count:3" \ 
  --set "password-change-requires-current-password:true"