Training Configure Password Policy

Training: Configure the Internal Password Policy

What you'll learn: how to set password rules, lockout protection, and login restrictions for users on the Internal identity provider. You need: Administrator access type, enterprise admin application. Time: 5 minutes.

Steps

1. Go to Left menu → Access Control → Identity Providers. (Fallback: search "Identity Providers" in the header.)
2. Click the Internal provider's name to open its configuration.
3. In Password Policy, set: Minimum Length, Require Mixed Case / Number / Symbol, and Expires In Days.
4. Toggle sign-in protections as your policy requires: Require Multi-Factor Authentication, Prevent Password Reuse.
5. In Rate Limit Options, set the Failed Attempt Limit (e.g. 5) and the Lockout duration in seconds (e.g. 86,400 = 24 hours). Check Permanent Lockout only if you want locked accounts to stay locked until an administrator intervenes.
6. To restrict where logins may come from, click + on IP CIDR Whitelist and add ranges.
7. Click Save.

Check your work

The History panel shows your update. Test with a non-production user: enter a wrong password past the attempt limit and confirm the lockout, then clear it early with the unlock button on that user's Enterprise Users detail page.

Related training

Training: Investigate Login Activity · Training: Create an Enterprise User