Overview
Your company's Z-Billing Administrators can configure your Z-Billing password expiration rules for a higher level of application security. You can configure your company's password expiration rules by navigating to Settings > Administrative Settings and selecting Security Policies. From here, Administrators can choose to have passwords "never expire" or to expire every 30, 60 or 90 days. When the user password expires, the user is prompted to reset password during login.
Solution
Password expiration is only enforced in the Zuora UI and not in the Zuora API. This means that logins created and used only for the API (and not used to log into the UI) will never expire. It is important to take the steps below to prevent the password for your company's API logins from expiring which can result in an interruption to your order processing flow:
- Create a unique login for API integration purposes only ("API Login").
- Do not use your API Login to access the Zuora UI. Remember: Password expiration is enforced in the UI.
- If the password is reset in the UI, it must also be updated in your API code.
- It helps to create API logins using the format
api@companyname.com. However, using this naming format alone does not prevent your API logins from expiring. The above steps must be taken to ensure your API login does not expire.
See Setting Security Policies for more information about configuring password rules.
Related
- Logging In to the Zuora System (Intermediate)
- How do I add custom fields to my WSDL?
- How do I bill a customer for a new purchase without using the default payment method in the API?
- How do I capture the SOAP API Request and Response?
- How do I migrate my credit card data from my payment gateway to Zuora?
- How do I prevent session tokens from expiring in the API?
- How do I use the credit card reference transaction payment method in Zuora?
- How do I use the Paypal (BAID) payment method in Zuora?
- How do I use Zuora with my existing website?

Comments