Configuration Properties for Password

By default, the configuration properties are defined in the Configurator for setting up password policies. You can change values as per your requirement. Accordingly, users specify the password when logging in to TIBCO MDM.

The following table lists the configuration properties required for password:
Property Name Description Default Value
InitialConfig - Miscellaneous
Password expiry period Specify the password expiration policy in days. If you do not want to set the expiration policy, specify the value as zero (0). 90 days
Password minimum length Minimum required length of the password characters.
Attention: The minimum required length of the password character is 8.
8 characters
Password maximum length The maximum required length of the password characters.
Attention: The maximum required length of the password character is 60.
60 characters
Password required Format of the password. The password must contain eight alphanumeric characters with at least one lowercase and one uppercase alphabet, one numeric, and one special character.
  • If you want to add special characters, change the default value. For example, (?=.*[@#$%!]).
  • If you want to customize the password policy criteria as per your requirement, change the default value.
Note: If you have changed the default value, you need to customize the display error message (Security Errors) in the UserText.properties file. For customization, see the section "Localize Text Strings" in TIBCO MDM Customization.
  • (?=.*[a-z])
  • (?=.*[A-Z])
  • (?=.*[0-9])
  • (?=.*[@#$%!])
Password restriction Indicates the pattern that the password must not contain. For example, repetitive numbers or characters. For example, 111 and aaa. The default value checks the sequence strings of characters and numbers. ([a-z\d])\1\1
Check password repetition

Indicates the number of passwords that must not be repeated when you change the password on the Reset Password page.

If you do not want to set the check on previously specified passwords, enter the value as zero (0).

6
Check user details in password

Password must not contain user details such as first name, middlename, last name, and so on.

If you want to disable checking user details in the password, change the value to false.

true
Lock user when password attempts exceed

Enables the lock user functionality.

When logging in to TIBCO MDM, if the user exceeds the number of wrong password limits, then the user is locked. The limit for entering the wrong password is specified in the Password Attempts Exceed configuration property.

If you want to disable the locking user functionality, change the value to false.

true
Password attempts exceed Indicates the number of attempts allowed to enter the wrong password. After the attempts exceed, the user is locked. 3

Change user password for the first time login

When users log in to TIBCO MDM for the first time, they must change the password.

After entering the password provided by the system administrator, the Reset Password page is displayed where the user can change the password.

true
Reserved keyword file name

A text file that stores reserved or invalid keywords such as company name 'TIBCO', the word 'password', and so on.

Users cannot enter keywords specified in the ReservedKeywords.txt file in the Password field.

/config/ReservedKeywords.txt
Security questions file name

A text file that stores security questions. The questions are displayed on the Add User and Modify User pages.

/config/securityQuestions.txt
Number of security questions Specify the number of security questions to be asked when creating a user. The limit is 10. 2
InitialConfig - Function Enable
Forgot Password

This property enables the Forgot Password functionality.

To send an email from TIBCO MDM to the user's inbox, you must configure the email properties in the Configurator. See, Email Configuration Properties.

False

See also, "Superuser Password" in TIBCO MDM Installation and Configuration.