Implementation Guide for Oracle Self-Service E-Billing > Customizing User Management >

Customizing User and Customer Service Representative CSR User Passwords

You can customize the password rules for user and Customer Service Representative (CSR) user passwords.

You can modify the strength of a password by customizing the regular expression rule in each use case where the user or CSR user enters a password in Oracle Self-Service E-Billing. You can specify different password validation rules for user and CSR passwords. The default password rules requires that the password have at least one capital letter, one lowercase letter, one number, and no spaces.

You can also change the minimum and maximum password lengths, though the minimum password length cannot be less than 7 as required by the Payment Card Industry Data Security Standard (PCI DSS).

You must use the same password validation rule each time a user or a CSR user enters his or her password.

To customize user or CSR user passwords

1. To customize the regular expression rule for password input validation, follow these steps:
   • User Passwords. Update the value of the common.field.pwd.rule key defined in the commonFieldValidator.properties file. This file is in the EDX_HOME\config\resourcebundle\com\edocs\application\resources\ directory (or the EDX_HOME/config/resourcebundle/com/edocs/application/resources directory on Windows), where EDX_HOME is the directory where you installed Oracle Self-Service E-Billing.

   common.field.pwd.rule=^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])[^\\s]*$

   • CSR User Passwords. Edit the following expression in the individual validation XML files for each type of CSR password you want to customize. For the validation file names, see Table 3.

     ^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])[^\\s]*$

2. To customize the minimum and maximum length file for a password, edit the individual XML validation files for each type of password you want to customize. For the validation file names, see Table 3. In the <field name="password"> section, update the minLength and maxLength parameter values.

Table 3 lists the name of the validation XML file to update for each type of password.