Example attribute Description Minimum requirement Compliance Enforce password The number of passwords that must be 10 history remembered in order to avoid frequent of passwords. Maximum password age The period of time (in days) that a 60 password can be used before the system requires the user to change it. Minimum password age The period of time (in days) that a 1 password must be used before the user can change it. Minimum password The length of the shortest acceptable 8 characters length password. Password must meet Technical enforcement of password Requires characters from 3 complexity requirements complexity requirements. of the following categories: English uppercase characters (A-Z) Base digits (0-9) English lowercase characters (a-z) Special characters (for example, !, $, #) Store passwords using Storing passwords using reversible Disabled reversible encryption encryption is essentially the same as storing plaintext versions of the passwords. Account lockout How long a locked-out account will remain 30 minutes duration locked following failed login attempts? Account lockout The number of failed login attempts prior 10 threshold to an account being automatically locked. Reset account lockout The number of minutes following a failed 30 counter after login attempt before the counter is reset to zero. APPENDIX C – Identity Hub Logical Architectures APPENDIX D – As a service terms This standard aligns with the definitions provided in the NSW Government Cloud Services Policy and Guidelines:
Example attribute Description Minimum requirement Compliance Enforce password history The number of passwords that must be remembered in order to avoid frequent of passwords. 10 Maximum password age The period of time (in days) that a password can be used before the system requires the user to change it. 60 Minimum password age The period of time (in days) that a password must be used before the user can change it. 1 Minimum password length The length of the shortest acceptable password. 8 characters Password must meet complexity requirements Technical enforcement of password complexity requirements. Requires characters from 3 of the following categories: English uppercase characters (A-Z) Base digits (0-9) English lowercase characters (a-z) Special characters (for example, !, $, #) Store passwords using reversible encryption Storing passwords using reversible encryption is essentially the same as storing plaintext versions of the passwords. Disabled Account lockout duration How long a locked-out account will remain locked following failed login attempts? 30 minutes Account lockout threshold The number of failed login attempts prior to an account being automatically locked. 10 Reset account lockout counter after The number of minutes following a failed login attempt before the counter is reset to zero. 30 APPENDIX C – Identity Hub Logical Architectures APPENDIX D – As a service terms This standard aligns with the definitions provided in the NSW Government Cloud Services Policy and Guidelines:
identity_management_authentication_standard_v1.1.docx