API Management
13.2 13.1 13.0 12.2 12.1 12.0 11.0
13.2 13.1 13.0 12.2 12.1 12.0 11.0

Password policies

This section allows administrators to define password strength and assign validation to enhance login security.

image2025-2-14_15-32-58.png

Adding a new rule

Click the Add button to add a new rule.

image2025-2-14_16-19-4.png

Rule Types

The two rule types - Strength and validation enhance password security and reduce the risk of unauthorized access.

Strength

Defines the complexity requirements that a password must meet to enhance security and prevent unauthorized access.

To ensure strength, it enforces conditions like:

  • Minimum and maximum length

  • Inclusion of uppercase and lowercase letters, numbers, and special characters

  • Avoidance of common or weak passwords

  • Use of passphrase-based authentication for enhanced security

Length Rule Class

Defines rules that enforce the minimum or maximum number of characters allowed in a password.

image2025-2-14_17-54-55.png

Property

Description

Rule description

A short description to understand what does the rule define.

Rule weight

Defines the priority or relative importance of the rule when multiple password rules are evaluated. Higher weight values indicate higher precedence, which may influence rule enforcement.

Length rule type

  • Equals

  • Not equals

  • Lesser

  • Greater

Length

Specifies the required number of characters that must satisfy the rule condition. This value determines how many characters in the password must conform to the defined rule criteria.

Match Rule Class

Defines rules that ensure the password contains or matches specific character patterns or criteria, such as required character types or defined expressions.

image2025-2-14_17-53-1.png

Property

Description

Rule description

A short description to understand what the rule defines.

Rule weight

Defines the priority or relative importance of the rule when multiple password rules are evaluated. Higher weight values indicate higher precedence, which may influence rule enforcement.

Match rule type

  • Equals

  • Not equals

  • Lesser

  • Greater

Rule string

Regex value of the password rule.

Validation

Defines rules that verify whether a password meets specific conditions or patterns during the validation process.

image-20260312-074755.png


It validates the following conditions:

  • Minimum and maximum length

  • Inclusion of uppercase and lowercase letters, numbers, and special characters

  • Avoidance of common or weak passwords

  • Use of passphrase-based authentication for enhanced security

Property

Description

Rule class

  • Length Rule

  • Match Rule

Rule description

A short description to understand what does the rule define.

Match/Length rule type

  • Equals

  • Not equals

  • Lesser

  • Greater

Rule String / Length

  • Rule String: Regex value in case of the Match rule type.

  • Length: Required number of characters that must satisfy the rule condition, in case of Length rule type.

Deleting a rule

Select the rule to remove, then click the Delete button that becomes enabled.

image2025-2-14_15-38-45.png