Password Options

Password policy options can be configured for the account.

To obtain information about password policy options currently set for your account, to increase the strength of your current password policy, or to enable any of the optional password features, contact OpenAir Customer Support.

Passwords created by account administrators for new users or users who have never signed in must respect the password policies for your OpenAir account. In addition, an option on the Employee Demographic form allows account administrators to force users to change their passwords the next time they sign in.

The password policy for your account is subject to minimum requirements. See Minimum Password Policy Requirements.

The following password options can be configured:

• Password Lifetime and Expiration — A lifetime can be specified for passwords, after which they expire and must be changed on the next successful logging.

• Password Expiration Notifications — An expiration notification email is sent automatically 14 days before the password expires, and 3 days before the password expires, unless the password is changed in the meantime. Notices include the date the password will expire and instructions for changing your OpenAir password.

• Password History — The password history option checks each newly specified password to ensure that a password is not reused for a specified number of password changes. The specified number of password changes must be at least 2.

• Password Complexity Verification — The minimum password length can be changed. The minimum password length must be at least 8 characters.

• Password Validation Against Known Compromised Passwords — When this optional feature is enabled for your account, OpenAir validates new passwords against a list of compromised passwords and will require users to enter a different password if the new password is on a regularly updated list of known compromised passwords. This validation does not apply to temporary passwords set by administrators.

• Password Expiration Rule Exception — Enables account administrators to override the password lifetime and expiration rule for individual users. OpenAir will not enforce the password expiration rule for the user if the option "Do not enforce password expiration rule for this user" is checked on the Employee Demographic form.

Important:

Passwords created or updated using the API, NetSuite integration and other integrations must respect the password policies for your OpenAir account.