Implementation Guide for Oracle Billing Insight > Customizing User Management >

Customizing End User and Agent Password Validation Rules

You can customize the password rules for Self-Service application users and Assisted Service application users, or agents, passwords.

You can modify the strength of a password by customizing the regular expression rule in each use case where the user or agent enters a password in Oracle Billing Insight. You can specify different password validation rules for user and agent passwords. The default password rules requires that the password have at least one capital letter, one lowercase letter, one number, and no spaces.

You can also change the minimum and maximum password lengths, though the minimum password length cannot be less than 7 as required by the Payment Card Industry Data Security Standard (PCI DSS).

You must use the same password validation rule each time a user or an agent user enters his or her password.

To customize user or agent user passwords

1. To customize the regular expression rule for password input validation, follow these steps:
   • User Passwords. Update the value of the common.field.pwd.rule key defined in the commonFieldValidator.properties file. This file is in the EDX_HOME\config\resourcebundle\com\edocs\application\resources\ directory (or the EDX_HOME/config/resourcebundle/com/edocs/application/resources directory on Windows), where EDX_HOME is the directory where you installed Oracle Billing Insight.

   common.field.pwd.rule=^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])[^\\s]*$

   • Agent User Passwords. Edit the following expression in the individual validation XML files for each type of agent user password you want to customize. For the validation file names, see Table 9.

     ^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])[^\\s]*$

2. To customize the minimum and maximum length file for a password, edit the individual XML validation files for each type of password you want to customize. For the validation file names, see Table 9. In the <field name="password"> section, update the minLength and maxLength parameter values.

Table 9 lists the name of the validation XML file to update for each type of password.