Set Password Policies
ExCM leverages the ASP.NET SQL Membership Provider password configuration settings to allow you to specify a password policy for external users that suits your specific use case. The settings that the ASP.NET SQL Membership Provider makes available for configuration are described in this table on Microsoft's MSDN site:
https://msdn.microsoft.com/en-us/library/ms998347.aspx#paght000022%5Fsqlmembershipproviderconfig
The password policy settings are made in the web.config file for your extranet web application. ExCM will automatically make the approriate edits for you via the Extranet Global Configuration Timer Job once you define and save your desired settings in Central Administration.
To define a password policy, follow these steps:
- In Central Administration, navigate to General Application Settings > Extranet Collaboration Manager > Global Registration Settings:

- On the Password Policy page, select your extranet web application:

- In the Membership Providers drop down, select the name of the ASP.NET Membership Provider you use for your extranet web application (you set this name at the time that you ran the Setup Wizard for your extranet web application):

- The out-of-the-box password policy settings will be retreived and displayed. If these settings are acceptable to you, there is no need to make any changes and you can click the Cancel button at the bottom of the page:

- If you would prefer a different password policy for your external users, make your desired changes and then click Save at the bottom of the page. For example:

- You will receive a message that your changes will be processed within 5 - 10 minutes by the Extranet Global Timer Configuration Job:

- After the timer job has run, you can reload the page and your changes should appear permantely. Also, you can test the password policy by attempting to login as an external user.
Important: If you have existing external user accounts in your extranet account store whose existing passwords do not conform to your new password policy, they will no longer be able to login until they have reset their password to conform to the new policy.
©2019 PremierPoint Solutions. All Rights Reserved.