Password Length Restriction in Configuration Not Enforced for OFSAA Users (Doc ID 1448495.1)
Last updated on APRIL 23, 2016
Oracle Financial Services Analytical Applications Infrastructure - Version: 7.3 and later [Release: 7 and later ] Information in this document applies to any platform.
Oracle Financial Services Analytical Applications (OFSAA)
In Oracle Financial Services Analytical Applications (OFSAA) 7.3, you have password restrictions in the System Configuration > Configuration screen. "Password Restriction" is set to "Restricted" and "Password Length" is 6 MIN and 20 MAX. However, OFSAA users can still change their passwords to a value that is only 5 characters long. They are not forced to enter a password of at least 6 characters. Password restriction enforcement is not working.
Steps to Reproduce:
Go to System Configuration > Configuration
Set Password Restriction to Restricted
Set Password Length to 6 MIN and 20 MAX
Click the Change Password length
Enter a password that is 5 characters
The password is changed to the new value successfully when it should get an error.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a Million Knowledge Articles and hundreds of Community platforms