Ciphr Payroll (Accord)

Step-by-step guide

The guide explains how it is possible to configure a variety of password settings in Payroll (Accord) which determine password length and complexity, password change intervals and password attempts.

Contents

• To set and/or change the password change interval
• To enable the password change interval
• Changing Passwords
• Password Complexity
• Advanced Security Password functionality
• Password Reset and Initial user passwords
  
  

To set and/or change the password change interval

• To set and/or change the password change interval: Click Company/User > Enter/Update Company and click on the Other tab
• In the Change Interval field enter the value required. Once the field is enabled (see image) the user will be prompted to change their password
• To set and/or change the password change interval

To enable the password change interval

• Click Company/User > Enter/Update Company and click the Properties tab
• Property number 16 - User Password Day Change Interval needs to be checked

Changing Passwords

Once the password change functionality has been enabled and the interval configured then when a user logs in after the interval period they will be prompted to change their password.

• Click Yes to change password

• Enter the Old Password
• Enter a New Password
• Enter the new password again in Confirm New Password

• Confirmation of the password change will be presented 

Password Complexity

By default the user password can be up to 25 characters and/or digits and password entries will be capitalised. If the User Password Complexity functionality is enabled then users will be able to enter upper and lower case characters, digits and non-alphanumeric characters and a character from at least three of these groups must be present in the password for it to be accepted.

To activate password complexity:

• Click Company/User > Enter/Update Company and click on the Properties tab
• Check property number 17 – Enforce User Password Complexity

• Click Save and restart Ciphr Payroll to apply the changes
• When users login after password complexity has been activated each user will receive a message asking them to reset their password to a more complex one

• Click Yes
• Enter the Old Password as before and then enter a New Password and repeat in the Confirm New Password using a combination of characters from three of the four groups:

  • • Uppercase characters of European languages (A through Z characters)

    • Lowercase characters of European languages (a through z characters)

    • Base 10 digits (0 through 9)

    • Non alphanumeric characters: ~!@#$%^&*_-+=`|\(){}[]:;"<>,.?/

Advanced Security Password functionality

Advanced Security Password functionality:

• User passwords will not be visible to anyone
• ‘Super users’ will be able to reset passwords
• User audit table and audit report
• New users and users with reset passwords are forced to change their password on login.
• Passwords will have 1 day minimum age and 60 days maximum age
• The password cannot be set to any of the previous 13 passwords
• Password’s length will be at least 8 characters
• The password must contain a combination of at least three out of the four following character types: upper case alphabetic, lower case alphabetic, numeric, non alpha/nonnumeric. No duplicate characters
• The users will be prompted 10 days before their password is about to expire
• User accounts will be locked out after 5 invalid logon attempts and will remain locked out for 30 minutes 

To activate advanced security functionality

• Login to the company where advanced functionality is to be activated
• Click Company/User > Enter/Update User and having selected the user that is to be given the functionality, click on the Other tab
• Check property number 7 – Allow resetting passwords for other user

• Click Company/User > Enter/Update Company and click on the Properties tab
• Set property number 19 – User Password Security Option, to 1
• Click Save and Close and restart Ciphr Payroll to apply the changes
• When users login again a password reset message may be presented if the password has expired or does not meet the complexity requirements.
• Click Yes

Password Reset and Initial user passwords

Only users that have the appropriate permissions to reset passwords for other users will be able to carry this out.

To reset a user password

• Click Company/User > Enter/Update User and select the user whose password is to be reset
• Click Reset Password