Password Management

Management of user passwords is done using the following:

• Account lockout. User account lockout is triggered after six login attempts with an incorrect password. The user sees the message on the Login page. The system automatically unlocks the user after 60 minutes.
• Password lifetime and expiry notice. Maximum age of password before a change is required is set to 90 days. Five days before the expiry of a password, a password expiration notice is displayed to the user on the APM Dashboard page on successful login, alerting the user to change the password before the password expires.
• Password expiration. On password expiration, on successful login, the user is redirected to the Change Password page.