Global Password Policy: Password Expiration, Renewal Notifications, and Custom Policies

Environment

• Product: SOLABS QM10
• Applies to: All users under the default Global Password Policy
• Authentication: Standard username/password login, and environments using a Single Sign-On (SSO) provider (e.g., Azure Active Directory (AAD) Premium, OneLogin)

Issue/Symptoms

Users are required to change their SOLABS QM10 password on a recurring basis and receive a series of email reminders as the password approaches its expiration date.

• The system prompts the user to set a new password after a fixed period of use.
• The user receives multiple reminder emails in the days leading up to the password expiration date.

Cause

This is expected system behavior, not an error. The Global Password Policy requires users to renew their password every 365 days. Enforcing periodic password changes elevates system access security and, in combination with SOLABS QM10's other security policies, helps prevent unauthorized access to the system.

Resolution

The Global Password Policy applies automatically and does not require configuration by the user. The following details describe how the policy behaves:

• Password expiration interval: Passwords must be changed every 365 days from the last password update.
• Expiration notifications: The system sends automated email reminders at the following intervals before the expiration date: 45, 30, 15, 10, 5, 2, and 1 day(s).
• Recommended action: Users should change their password as soon as they receive an expiration notification, to avoid any interruption in system access once the password expires.

Additional Information

• Preventive Measure: Update the password promptly upon receiving the first expiration notification (45 days before expiration) to avoid last-minute access issues.
• Known Limitation: The 365-day expiration interval and the standard notification schedule apply to all users by default and cannot be changed by the user directly.
• Custom Policies: SOLABS offers custom password policy configurations for clients using an external Single Sign-On (SSO) provider, such as Azure Active Directory (AAD) Premium or OneLogin. Clients interested in a custom password policy should contact their Client Success representative for more information.