Setting Password Requirements

A password expiration utility is available if the System Administrator requires that all users convert to case sensitive passwords upon the next login.

This utility expires all passwords in FND_USER, including that of SYSADMIN and default Vision accounts, and can be run as a SQL Script ($FND_TOP/sql/AFCPEXPIRE.sql) or as a Concurrent Program (FNDCPEXPIRE_SQLPLUS).

For more information see the Oracle E-Business Suite System Administrator's Guide - Maintenance at http://docs.oracle.com/cd/E18727_01/doc.121/e12894/T202991T202995.htm.

Oracle recommends that you use the profile settings described in this section to provide optimal security in login password usage, including:

• Setting Password Length Requirement
  This profile determines the minimum number of characters required in a user's Oracle Life Sciences Data Hub login password.
• Setting "Hard to Guess" Requirement
  This profile enforces requirements that make it more difficult to guess what another user's password might be.
• Enabling "Forgot Your Password?" Functionality
  For Oracle Life Sciences Data Hub, Oracle recommends a setting of 40 for the Local Login Mask profile.
• Setting a Limit on Log-In Attempts
  This profile option determines the maximum number of logins a user can attempt before the user's account is disabled.
• Setting a Time Limit on Password Reuse after Resetting Password
  This profile will set the minimum number of days that a user must wait after changing his or her password before being allowed to reuse a password.