Siebel Security Guide > User Administration > About Managing Forgotten Passwords >

Defining Password Length for Retrieved Passwords

This topic describes how to configure the length of new passwords retrieved by users who have previously self-registered but who have forgotten their password. For information on the forgotten password feature, see About Managing Forgotten Passwords and Retrieving a Forgotten Password (Users).

To make sure that passwords conform to your company's policy on password length, you can specify minimum and maximum character lengths for passwords by adding two user properties to the User Registration business service in Siebel Tools. These user properties are RandPassMinLength and RandPassMaxLength. When a user requests a new password using the Forgot Your Password feature, the User Registration business service invokes the SetPassword method to create the new password after verifying that the password meets the password length requirements defined for these two properties.

To define minimum and maximum values for password length

1. Open Siebel Tools and, in the Object Explorer, click Business Service.

   The Business Services list appears.

2. In the Business Services list, query or scroll to select the User Registration business service.
3. Choose Tools, and then Lock Project.
4. In the Object Explorer, click Business Service User Props.

   The Business Service User Props list appears.

5. Right-click in the Business Service User Props list and select New Record from the displayed context menu.

   A new record field appears.

6. Complete the fields for the new record, as shown in the following table.

   In this field...	Enter...
   Name	RandPassMinLength
   Value	Enter the minimum number of characters that your company's password policy states a password must contain. The default value is 5.

   This defines the minimum number of characters that a password can contain.

7. Step off the record to save changes.
8. Repeat Step 5, Step 6, and Step 7 with modifications for Step 6, as shown in the following table.

   In this field...	Enter...
   Name	RandPassMaxLength
   Value	Enter the maximum number of characters that your company's password policy states a password must contain. The default value is 15.

   This defines the maximum number of characters that a password can contain.

9. Recompile the Siebel repository file, and unlock the User Registration project.

Related Topic

About Managing Forgotten Passwords