Prime AD Password Reset Q

[CraigDore]

Greetings - I'm looking for guidance on whether the AD Password reset feature in SecurID Prime has the capability to enforce restrictions on the password complexity, length and so forth. Is this controlled purely from AD or can we do something there?

BTW - posting this in the community as I suspect that others may have a similar question in future.

[SeanDoyle · Accepted solution]

Prime Self Service contains configurable password complexity rules and provisions for a password dictionary. The rules are configured in the rules.xml file in ssp/config and the actual list of applicable rules are enabled in the spring-context.xml. A new release approx. Nov 1, 2019 will include support for dynamic rule feedback during password entry.

spring-context.xml sample:

   <property name="passwordRules">
      <list>
         <ref bean="PasswordSizeRangeRule" />
         <!--<ref bean="PasswordDictionaryRule"/>-->
         <ref bean="AtLeastOneAlphabetPasswordRule" />
         <ref bean="AtLeastOneSpecialCharacterFromSetPasswordRule" />
         <ref bean="AtLeastOneUpperCasePasswordRule" />
      </list>
   </property>

The beans in the list reference rules in the rules.xml

rules.xml sample

<bean name="AtLeastOneAlphabetPasswordRule" class="com.rsa.pso.selfservice.pojo.RegexValidationRule"
scope="singleton">
   <constructor-arg index="0" value="AtLeastOneAlphabetPasswordRule" />
   <constructor-arg index="1" value="password.rule.onealphabet" />
   <constructor-arg index="2" value="(?=.*[a-zA-Z])" />
   <property name="breakOnFailure" value="true" />
</bean>

Coming soon:

Note, the text prompts are driven by the rules configuration and there is now the ability to configure conditional rule sets and/or as above.. this is a beta screen grab. Once released to the world we will provide a quick video demo.