Our Enterprise Security Architecture & Innovation team has updated their Identification and Authorization Management Technical Standards for Qualtrics and they have made some additional feature requests so we can meet those standards.
The standards we currently can meet include:
Min # of characters
Complexity
Rotation Period (How often do you need to change your password)
Entry Masked (Does the screen hide your password as you type it)
Temporary Passwords
Auto-Complete Disabled and more
The 2 standards we currently can’t meet include:
Minimum Age (How old a password has to be before it can be changed) - Standard is 1 day.
Reuse History (How many passwords have to be created before an old one can be used) - Standard is 4 times
Is there a way that we can meet the standards our ESAI has set? How can we ask for these features?
If no solution can be found, there will likely be much more rigorous policies aroud the use of the product in our company.
Any thoughts or assistance is gladly welcomed.