IBM Security MaaS360

 View Only
  • 1.  Password Expiry Date - Local User

    Posted Tue January 07, 2020 08:38 AM
    Hi,
    I noticed that you introduced password expiry for local users in MaaS360 in the latest release (10.76).
    I haven't find a way to override this.

    Could you help me out here? Is there a way to turn off password expiry, either on a user level or on a company/account level?

    ------------------------------
    Best Regards,

    Kjetil Holm
    ------------------------------


  • 2.  RE: Password Expiry Date - Local User

    Posted Tue January 07, 2020 11:16 AM
    Hi Kjetil,

    The 90 day expiry for local user passwords has been around for a few release cycles now, but with 10.76 we introduced enhancements that add some transparency to the process - this includes adding a column to the user record to aid in tracking expiry dates, new notifications, and user account lockouts for multiple failed auth attempts.  The notifications can be disabled in the user settings but the password expiry feature itself (which has been implemented since 10.74) can not be turned off.

    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 3.  RE: Password Expiry Date - Local User

    Posted Wed January 08, 2020 09:40 AM
    Hi Matt,
    I suppose that an expired user password will have no effect on already enrolled device?
    Also that changing the user password will have no effect on already enrolled devices?

    It would be good if you could consider adding the possibility to disable the password expiry on certain users.

    BR,
    Kjetil

    ------------------------------
    Kjetil Holm
    ------------------------------



  • 4.  RE: Password Expiry Date - Local User

    Posted Wed January 15, 2020 02:32 PM
    This is correct - there is no impact on currently enrolled devices (meaning that they will not become un-enrolled).  The password expiry was something that was added to meet certain security standards and certifications needed to operate in particular sectors around the world.  We can always raise enhancement requests for disabling the feature as well.

    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 5.  RE: Password Expiry Date - Local User

    Posted Mon August 23, 2021 09:42 AM
    I second the motion to override password expiration. One more headache to deal with having so many users/phones. The nature of our business and usage does not warrant this additional security. Our M3 experience is too overwhelming as it is. Bug's, lack of competent support and wasteful intervention like this. One size does not fit all. Give the customer what they need. We are considering migrating to some other MDM platform.

    ------------------------------
    ARSEN SARKISIAN
    ------------------------------



  • 6.  RE: Password Expiry Date - Local User

    Posted Mon August 23, 2021 02:33 PM
    Hi Arsen, 

    As mentioned by Matt earlier we had to implement this for Security reasons but we can always raise an Enhancement request for it to disable the feature. Please reach out to me on email below and we work through this request. 


    ------------------------------
    Neel Amin
    ------------------------------



  • 7.  RE: Password Expiry Date - Local User

    Posted Mon August 23, 2021 02:54 PM
    Neel/Arsen,
    I submitted an RFE about this in January 2020, it eventually got the status "Uncommited Candidate". I haven't paid much more attention to this after that, but I just got an email that someone had commented on the thread that I started.

    You might be better at writing a convincing description and justification, but feel free to see what I've already submitted.

    ID 139375

    BR,

    Kjetil

    ------------------------------
    Best Regards,

    Kjetil Holm
    ------------------------------



  • 8.  RE: Password Expiry Date - Local User

    IBM Champion
    Posted Tue August 24, 2021 08:57 AM

     

    Hey: ARSEN SARKISIAN

    As someone who has been involved in the MDM field for over 20 years starting with supporting the Blackberry Enterprise Server, I find it strange to hear that your experience with support as well as the ongoing management of MaaS has not been great.  I think the issue is knowing where to find the technical resources when needed.  I would be more than happy to speak with you about this.  We are an MSP-Mentor and assist IBM customers all the time. 

     

    Thanks,

     

    Mitch Lauer

    connecTel  Wireless  

               

    159 Perry Highway, Suite 200

    Pittsburgh, PA 15229

    216-970-6981 | Cell-US

    416-206-2438 | Cell-Canada

    412-339-5775 | Help Desk

    412-339-5765 | Direct Dial