Keycyte PAM 3.2 · Administrator Guide

Password Policies

A password policy defines how Keycyte PAM generates and changes the passwords of the vault accounts that use it:

• the complexity of generated passwords,
• whether and when passwords are changed automatically,
• how a password is changed (by the account itself or with a privileged account),
• operations on Windows and Active Directory accounts that run before a user connects and after the session ends, such as adding the account to a group only for the duration of the session.

A vault account uses at most one policy. You assign the policy on the account, or add accounts to the policy on the Password Policy page.

To open the page, select Password Policy in the menu. An ADMIN sees only the policies that the ADMIN owns.

This section contains the following topic: