Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Prevent users from changing between a set of common passwords
  • Ensure that users change their passwords periodically
  • Prevent users from quickly reverting to an old password
  • Require a minimum password length
  • Require complex passwords that do not contain the users name and include at least three of the following five categories: uppercase letters, lowercase letters, digits, non-alphanumeric characters and other unicode characters.
  • Deter multiple attempts to break into a user account
  • Allow users to reset their passwords and provide the URI for password reset.

Configure password reset

Optionally configure reCAPTCHA

For password recovery, optionally enable reCAPTCHA V2 by adding reCAPTCHA keys to Abiquo. Request the keys from this link: https://www.google.com/recaptcha/admin#createsite

...

If only one key is present and the other key is missing, the user will receive an error message, and they cannot recover their password.

Configure

...

reset password email and URI

See Configure Email Templates

...

Users can reset their password in the UI by clicking on the Forgot your password? link.

...

When it is true, the default password reset link will open the following dialog.


Password UI

...

configuration

Set up passwords in Configuration view on the Password page: 

...

For full documentation see Configuration view#Security

Create a

...

user

When you create a user, you can select an option to ensure they reset their password on login.


Locked

...

users

A user that is locked out for too many failed login attempts is marked as Suspended in Users view in both the list view and the card view.

...

The administrator can manually activate the account or the user can wait for the lockout period to end. 

API

Added to LoginResource

Password Eventsevents

The Abiquo events related to passwords can be found in the  Users section of the Events table.