<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hi,</div><div>if you are talking about password aging using maxAge in the security policy, this works for midPoint authentication.</div><div>Users with passwords out of the maxAge (since the last password change) are not allowed to login to midPoint.</div><div><br data-mce-bogus="1"></div><div>Best regards,</div><div>Ivan</div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>JStanczak@vinu.edu<br><b>To: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>Sent: </b>Monday, October 7, 2019 2:08:43 PM<br><b>Subject: </b>[midPoint] Password Aging?<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><font face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" size="2"><div style=""><div style=""><div>I'm trying to age passwords that have not been changed in 180 days. I can set a "valid to" and the expire works fine. But password aging doesn't seem to change it. I'm not sure where I went wrong. </div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;"><maxAge>P180D</maxAge></span><br></div><br><br><div><attribute id="4"></div><div><c:ref>ri:expired</c:ref></div><div><tolerant>true</tolerant></div><div><exclusiveStrong>false</exclusiveStrong></div><div><outbound></div><div> <authoritative>true</authoritative></div><div> <exclusive>false</exclusive></div><div> <strength>normal</strength></div><div> <source></div><div> <c:path>$focus/activation/effectiveStatus</c:path></div><div> </source></div><div> <expression></div><div> <script xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:ScriptExpressionEvaluatorType"></div><div> <code></div><div>import com.evolveum.midpoint.xml.ns._public.common.common_3.ActivationStatusType;</div><div>return effectiveStatus == ActivationStatusType.DISABLED;</div><div></code></div><div> </script></div><div> </expression></div><div></outbound></div><div></attribute></div><br><div>Thanks.</div></div></div></font>
<br>_______________________________________________<br>midPoint mailing list<br>midPoint@lists.evolveum.com<br>http://lists.evolveum.com/mailman/listinfo/midpoint<br></div><div><br></div><div data-marker="__SIG_POST__">-- <br></div><div>Ivan Noris<br>Senior Identity Engineer<br>evolveum.com</div></div></body></html>