Enforce strong passwords for local users

New feature for those who use local user management in Next®.

Next® is typically used as an integrated element in a corporate IT landscape, and adapting the security measures already in place. Next® Active Directory Connector and Next® Enterprise Single Sign On, allow you to manage your Next® users with your enterprise tools. 

If you use Next® without such user management tools, and manage your users directly in Next®, you'll appreciate that we have added the ability to enforce strong passwords directly in Next®.

The options are:

  • Complex password required
  • Long password required (default)
  • No restrictions on passwords

System wide setting of password requirements for local users. 


The setting is enforced when an end user change their password, and when an admin configure an integration user profile.


The password is not long enough.

Action: Select a password that is at least 16 characters in length.


The password is not complex enough.

Action: Select a password that is at least 8 characters in length, consist of letters: a-z, A-Z, 0-9, and special characters &@§%, and contains at least three out of the four groups. 


The password is not secure when it contains you user id.

Action: Select a password that does not contains your user id.  


The business log

Time and user for the most recent change is noted on the setting. No logging takes place in the business log, 

Future enhancements

Changing the password requirements for local users, will be logged in the business log.

Log entry:

ADLEO Changed the password requirements for local users 

For the techies

We recommend using tools like Active Directory and Active Directory Federated Services to manage you users. This allows you to use two-factor log in, and  other important security features. 

Additional information

Please refer to the online product guide for additional information on this feature, once it is released.

Commercial terms and conditions

This feature is available at no additional cost, to users with an active service plan. Any consultancy assistance will be invoiced.

Disclaimer

Despite our best efforts, we may be forced to change both content and expected delivery of future product updates without notice.  


Details

Title:

Enforce strong passwords for local users

Type:

New feature

Status:

Planned

Release time:

December 2019

Affected products:

Next® Bank Statements
Next® Contracts
Next® Emails
Next® Enterprise Archive
Next® ExCustody
Next® Invoices
Next® Mailroom
Next® Processes

Audience:

Admin
Architect

Classification:

Public

Responsible product manager:

Kim Hellum

Updated:

5.11.2019

By:

Kim Hellum