Password requirements can be set for patrons using ILLiad authentication. New installations of ILLiad will already contain this requirement. Those updating from an older version can set the password requirement in the ILLiad Customization Manager.
Default Password Requirement
The default validation rule for passwords now requires at least eight characters with at least one lowercase letter, one uppercase letter, and one number, and is expressed by this regular expression:
^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}$With the ILLiad default password requirement, passwords must contain:
- At least 8 characters
- At least 1 lowercase letter
- At least 1 uppercase letter
- At least 1 number
Setting the Password Requirement
To set the default validation rule for ILLiad passwords:
- Open the ILLiad Customization Manager.
- Navigate to Web Interface | Validation | WebValidation.
- Select the line item in the WebValidation table that reads Formname - Registration and Fieldname - Password1
- In the Validation field, change the value to ^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}$
- Click Save.
- Repeat for Password2
Editing the Password Requirement
The default password requirement can be edited to fit specific institution needs. This is done by simply editing the regular expression that sets the password requirement.
See Testing Regular Expressions for more information about regular expressions.
- Navigate to Web Interface | Validation | WebValidation in the ILLiad Customization Manager.
- Double-click on the line you want to edit (Change Password or Registration).
- Edit the Validation field.
- Click Save.
Password Examples
The default requirement above (^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}$) breaks down roughly as:
- A ^ and $ character to indicate the beginning and end of the text.
- A series of (?=.*#character class#) elements, which look ahead to make sure at least some part of the text matches the given #character class#, which includes
- \d - any number
- [a-z]any lowercase number
- [A-Z]any uppercase number
- .{8,} to ensure the text is at least eight characters.
Here are some examples of some common complexity requirements expressed as regular expressions. Remember that the web validation fields cannot exceed 255 characters when designing your regular expressions, and to change the rule for both the registration and the change password forms.
| Require at least eight characters with at least one letter, one number, and one symbol |
|
| Require between 8 and 20 characters with at least one letter and one number |
|
| Require at least 10 characters |
|
| Requires a password of at least eight characters with characters coming from at least two of the following three groups: letters, numbers, and symbols. |
|