Hi Joe,

for our project we will probably need to add some general security settings related to password and user expiration (of course affecting only mojoportal's native authentication system), in order to adhere to some security and privacy standards.

Before starting to see how to implement theese features (probably using mojoprofile.config file to add the new fields, and "User Sign In Event Handlers"), we wonder if you have already received requests or suggestions for implementing in the standard core the following "User Identity and Security" settings:

• User expiration date (for temporary account)
• Require Password change every xx months (or days or similar)
• Force Password change at next login (the user is automatically created with a random password, but he must insert its own password)
• Password change not allowed
• Block user (during the login) if he did not log in the previous xx months (or days) (in other words, if the user's last login is older than the specified period).

 Thanks and best regards

Riccardo

Hi Joe,

of course it is a possibility: please, can send further details to my email address?

Thanks

Riccardo

Hi,

I have the same need for password expiration.  Has this feature been included in any of the recent releases?

Thanks,

Brad