COINS OA Enhancement: User Security Enhancements

Transcription

1 Document Ref: OA_CE-SY003 (PDR 23235) Date: June 2, 2014 Document Version: 1.0 Modules Affected: System Earliest available version of COINS: COINS OA v11.01 Documentation Updated: This document may contain information that is not incorporated into the documentation, such as procedures and sample reports, so you may want to keep a copy for future use. An archive of CE documents is available on the COINS web site Client Area. Construction Industry Solutions 6 Airport Park Blvd Latham NY USA 2014 Construction Industry Solutions

2 Contents 1 Overview Business Reasons for Change Initial Setup Screen and Processing Changes System Parameters User Maintenance COINS Login Password Reset Overnight Routine (sy906b)... 8 Construction Industry Solutions, June 2, 2014 Page 2 of 8

3 1 Overview A number of user security enhancements have been added, and passwords and security can be set differently between Admin and normal users. Password Length: a minimum password length can be imposed, with a different minimum password length for Admin users. Password Life: Admin users can be prompted to change password at different intervals from normal users (for example, normal user after 90 days, Admin user after 30 days). Password History: password history can be saved so a previously used password cannot be re-used if used within a given number of passwords resets. Invalid Login Attempts: users can be locked out of their account after a given number of failed login attempts. Automatic Lock Out: User accounts can be automatically disabled/locked if the user has not logged in for a given number of days. 1.1 Business Reasons for Change These changes provide additional security to prevent unauthorized use of COINS. 2 Initial Setup These changes assume that you have configured a list of Administrators for the system using Module License Maintenance: Construction Industry Solutions, 02 June 2014 Page 3 of 8

4 Figure 1: Module License Maintenance - License Tab When this document refers to an Admin user, it is referring to the users listed in this field. Construction Industry Solutions, June 2, 2014 Page 4 of 8

5 3 Screen and Processing Changes 3.1 System Parameters The following new SY parameters have been added. Parameter LKUNUSED LOGATTEM PWDEXWRN PWDHIST PWDLEN PWDLENA WEBPWDXA Description The number of days that can pass when a user does not log in, before their account will be automatically locked out. The number of invalid login attempts which are allowed before a user s account is locked out. The number of days before a user s password expires that COINS will warn them. The warning says how many days the password will expire in. The number of historic passwords which should be stored for each user; the user will not be able to repeat a password from this list. The minimum password length required when new passwords are set. The minimum password length for Admin users. The number of days that an Admin user's password can be used before it expires. 3.2 User Maintenance A new checkbox, Account Locked, has been added to the User Maintenance screen. If this is checked then it will be impossible for this user to login. This field will be automatically checked if: The user exceeds the number of login attempts as set by the LOGATTEM parameter. The user does not log in within the number of days set in the LKUNUSED parameter. 3.3 COINS Login If a COINS user account is locked it will not be possible for the user to log in using any interface. When logging into the OA interface, if the PWDEXWRN parameter is set and the user s password expiration date is within this number of days in the future, they will be shown a warning. Construction Industry Solutions, June 2, 2014 Page 5 of 8

6 Figure 2: Login Expiration Warning Message If the user is an Admin user and the WEBPWDXA parameter is set then that parameter value will be used instead of WEBPWDEX. If the user enters their password incorrectly then a new integer field will be incremented. If they log in successfully this will be reset to 0. If the number of invalid logins reaches the value set in LOGATTEM, the user s account will be locked. Figure 3: Account Locked Error Message Construction Industry Solutions, June 2, 2014 Page 6 of 8

7 3.4 Password Reset Whenever the password field is reset, the following new rules are applied: The minimum password length is enforced based on the PWDLEN/PWDLENA parameters. Figure 4: Password Length Error Message If the PWDHIST parameter is set then: COINS checks the new password against the list of stored passwords. If the new password is the same as any in the list, COINS displays an error message and the user will have to choose a different password. Construction Industry Solutions, June 2, 2014 Page 7 of 8

8 Figure 5: Reused Password Error COINS stores the encrypted new password value internally in the list of historic passwords. 3.5 Overnight Routine (sy906b) If the LKUNUSED parameter is set, the overnight routine will lock the accounts of any users who have not logged in within the specified time period. Construction Industry Solutions, June 2, 2014 Page 8 of 8