Skip to main content

Configure password policy

Zuora

Configure password policy

  1. Last updated
  2. Save as PDF

A password policy is a set of rules that can help users to create reliable and secure passwords to access Zuora Revenue. It can also help guarantee that the passwords are stored and used in an appropriate way. It is a good practice for the system administrator to implement a strong password policy for Zuora Revenue.

Overview

In Zuora Revenue, the password policy is determined by the Password Configuration lookup definition, which contains the following lookup codes. 

Lookup code Description
MIN_PASSWORD_LENGTH

The minimum length that is allowed for the password. The valid value is an integer that is equal to or greater than 8. If the specified value is less than 8, the specified value will be ignored and the value of 8 will be applied.
MAX_PASSWORD_LENGTH The maximum length that is allowed for the password. The valid value is an integer from the MIN_PASSWORD_LENGTH value to 30. If the specified value is greater than 30, the specified value will be ignored and 30 will be used.
PASSWORD_EXPIRY The duration (in days) after which the current password expires. The default value is 90.
REQUIRED_MIXED_CASE_AND_NUMBER Specify whether the password requires a combination of uppercase letters, lowercase letters, and numbers. The valid value is Y for yes and N for no.
SPECIAL_CHARACTER_REQUIRED Specify whether at least one special character is required in the password. The valid value is Y for yes and N for no.
LAST_N_PWD_CANNOT_BE_USED Specify the number of previous passwords that cannot be used. The valid value is an integer from 0 to 10. For example, if eight is specified, the last eight passwords cannot be used as the new password. If the specified value is greater than 10, the value of 10 will be used.
ENABLE_SHA_ENCRYPTION Specify whether to enable SHA (secure hash algorithm) encryption for the password. The valid value is Y for enable and N for disable.
LOGIN_ATTEMPTS Specify the maximum number of login attempts that are allowed. The valid value is an integer. The default value is 5, which means the account will be locked after 5 login attempts fail.

Procedure

To change any lookup code for the password policy, complete the following steps:

  1. Navigate to Setups > Application.

  2. Click open-side-menu.png to open the side menu and click Lookups. The Lookup page is displayed.

  3. Search for the Password Configuration lookup, hover the mouse over the line, and then click the Edit Lookup Definition icon icon-edit-definition.png. The Edit Lookup Definition window is displayed.

    edit-lookup-definition.png

  4. To change the lookup value, click the target line in the Lookup Value column and enter the value.

  5. To save your changes, click icon-save-new.png and close the window.