| To: | Personnel/Payroll Contacts |
| Subject: | State Controller's Office Web Password Reset |
| Sent Date: | 08/31/2007 |
Our office is excited to announce that our programmers are currently working on an automated password reset program that will enable users to easily reset their Web password. This means initiating some of the more current best practice methods and enhancing our existing security. Our office would like to share a few changes that will take place and would ask that you pass these plans for future enhancements on to your employees currently using our Web applications.
- A new challenge question will be incorporated into the application logon process. The user may choose to answer his/her challenge question when the password has been ‘forgotten’ or ‘an invalid password’ has been keyed. If the challenge question is answered correctly a new password will be automatically e-mailed to the user. If the user does not answer the challenge question correctly or does not have a valid e-mail address, they will be redirected to the “Notify helpdesk page,” which will provide directions on how to reset passwords.
NOTE: Once these changes are implemented to the production environment, all users will be required to select and answer a challenge question (this is a one time requirement upon the user’s first logon attempt).
- The new password requirement will be a minimum of 8 characters with at least one character required to be a numeric value and one an alpha character.
- The new program will store two previous passwords and new passwords cannot be one of the previous two.
- Passwords will expire after 180 days with a 14 day expiration (grace period) notification.
A separate notification will be sent out when this new process is ready to be implemented. Keep in mind that with this new process, it is important that all users have a valid e-mail address on our system. If you have any questions regarding your agency e-mail addresses, please contact Elizabeth Brooke at dspsecurity@sco.idaho.gov.
If you have any questions regarding these changes please feel to contact the DSP Help Desk by calling 334-2394 or by e-mail dsphelp@sco.idaho.gov.
|