Password Expiration
Hitachi ID Password Manager (formerly P-Synch) can invite users to change their passwords with a web UI before they expire. These invitations can be sent via e-mail or launched in a web browser when users sign into their PCs. Users can even be forced to change passwords by launching a kiosk-mode web browser at login time.
Process
To enforce password expiration and to get users to trigger web-based password synchronization, Password Manager is configured to detect upcoming password expiration on individual systems (e.g., Windows or NetWare servers, LDAP directories) and to prompt users to change all of their passwords at once with the Password Manager web GUI, rather than one system at a time with native password change screens.
Typically password expiration is configured so that users change their passwords with Password Manager on a shorter schedule than any other application or system password. This way, users are never prompted to change passwords by anything other than Password Manager itself or systems that automatically trigger Password Manager transparent password synchronization.
Early notification of upcoming password expiration is a viable alternative to transparent password synchronization, especially in cases where it is impossible to trigger synchronization from the primary login system that users most often use.
Users can be notified of upcoming password expiration by e-mail. Alternately, a small client program can be added to global network login scripts, which checks whether the user currently logging in is on the list of "soon to expire" users and if so opens the user's default web browser to a URL that asks the user to change his passwords with a web GUI, using Password Manager.
Users can be forced to change their passwords when they sign into the network, by opening a kiosk-mode web browser to the password change screen and requiring the user to change passwords before they can close this browser.
The timing of password expiration can be calculated based on the most recent password change a user made with Password Manager, in addition to upcoming expiration on a managed system.
Watch a Movie
