Access Manager Ideas

Idea ID: 2783426

Customer request: Add support for "haveIBeenPwned" to password policy checking

Thomas Theiner OpenText Employee

Status: Delivered

Delivered

See status update history

over 6 years ago

Recently, Firefox added support for haveIBeenPwned (https://haveibeenpwned.com/Passwords) to their browser in order to disallow passwords that have already been pawned in the past.

Our customer BASF would like this to be part of SSPR, too, so that newly entered passwords will be rejected when found in the haveIBeenPwned database.

Tags:

self service password reset

Integrations

Gireesh Kumar over 4 years ago

This is included in SSPR 4.5

https://www.netiq.com/documentation/self-service-password-reset-45/sspr-adminguide/data/b14go2v1.html#t4c5kb104zpb

Gireesh Kumar

Sr. Product Manager - IAM
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
Red_Baron over 4 years ago

Looks like this was added as a feature in SSPR 4.5.
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
pnagorck over 5 years ago

Certainly something any solution should be providing as almost a default. Given other competitors alreay offer a breach password service
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
gbatty1 over 5 years ago

This is exactly the type of capability IT Security departments are requesting and is being built into other competitors offerings. It would be a worthwhile addition to the SSPR product.
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
MigrationDeletedUser over 5 years ago

This would be a useful and practical addition to the overall security posture for any organization
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel

Resources

Support

Documentation

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Privacy Policy
Terms of Use
Cookies Preferences

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.

Menu

Access Manager Ideas

Labels

Customer request: Add support for "haveIBeenPwned" to password policy checking

Tags:

Resources