Policy Server Guides › Policy Design Guide › Password Services Dialog Reference › Password Policy Dialog › Password Policy Dialog Fields and Controls › Password Policy Dialog—Expiration Tab › Password Expires if Not Changed Group Box

Password Expires if Not Changed Group Box

The Password Expires if Not Changed group box is where you configure behavior for passwords that have expired and have not been changed by the owner. Optionally, you can specify how far in advance users are warned that their password will expire.

After number Days field

Specifies the number of days after a password expires that SiteMinder waits before disabling the user or forcing a password change.

Note: SiteMinder does not disable an account when the number of days specified in the After number Days field in the Password Expires from Inactivity group box is reached. A user must attempt to login to the account before SiteMinder disables it.

Disable User radio button

If selected, Specifies that when a user’s password expires, SiteMinder should disable that user’s account. Disabled users must be enabled using the User Management Dialog (see the SiteMinder Policy Server Management Guide).

Force Password Change radio button

If selected, specifies that when a user’s password expires, SiteMinder should force a password change when the user next attempts to log in.

Issue expiration warnings for <number> days field

Specifies how many days in advance a user is notified that their password is about to expire.

Note: If you have a password policy enabled and users enter the wrong password in the optional "Change Password" screen, they are redirected back to the login page and do not get an error message since their current session is valid.

More information:

Password Services Dialog Reference