Administration Guide › Password Management › Password Policies › Specify Regular Expressions

Specify Regular Expressions

Password regular expression matching allows you to specify regular expressions (text patterns used for string matching) that each password must match or not match in order to be valid. This can be useful, for example, if you want to require that the first character in the password is a digit, but that a digit not be the last character.

To configure multiple expressions for a single password policy, Identity Manager must integrate with SiteMinder. If you create multiple expressions, acceptable passwords must match all specified expressions.

To add a new required expression

1. Type a descriptive tag for the expression (no white space) in the Name field.
2. Type a regular expression using the syntax described in Regular Expressions Syntax in the Must Match field.
3. If the password must not match the regular expression, select the check box in the Must Not Match column.

Note: If CA Identity Manager integrates with SiteMinder, you can specify multiple expressions by clicking the plus (+) sign to add the expression.

Example: The following regular expression definition could be used to require that all passwords start with an upper or lower case letter:Name: MustStartAlpha

Expression: [a-zA-Z].*