E1 8.93 - password format rules on web client

[TKRONGI]

We changed the processing options on P98OWSEC to enforce password format rules. This works fine on the fat client and on the web when the user changes their password. It does not enforce the rules on the web client during a expired password request. It looks like the forced password change uses processing options from another location. Anyone seen this before ?

 

[ice_cube210]

TKRONG1,

This might be a tools elease bug. See below

Solution ID - 200990278

E1: JAS: SEC ISSUE:After setting up Global Password Policy (form exit) in P98OWS
Details: ISSUE:
After setting up Global Password Policy (form exit) in P98OWSEC, EnterpriseOne is not validating any of the password restrictions.

SOLUTION:
This issue was reported with SAR 7631243 Web Client Password Policies and should be fixed with 8.94_L1 and beyond.

This functionality is not currently available via a web-client session because the sign-on screen on the web-client is designed differently and does not directly interact with the P98OWSEC application. As a result, user who changes their password via a web-client session will not be subject to the proper password validation logic.

KEYWORDS:
P98OWSEC
Global Password Policy

Program ID: P98OWSEC
Release: 89, 810, 811
Service Pack/Tools Release: 8.94
Platform: ALL


You might have to do a Tools Release upgrade to get this working on the web also.

 

[TKRONGI]

I missed this solution - so did support. Sounds like the problem. Thanks for your help.