PathFactory Password Rules FAQ

Frequently asked questions about password rules for PathFactory are listed below.

How many times must you create a new password before you can reuse a previous password?

5

What is the max amount of attempts to login allowed before being locked out?

10

If you enter 10 unsuccessful passwords, how long until you are allowed to try again? 

If you have tried unsuccessfully to log on 10 times, you will need to contact your Administrator to regain access to your PathFactory instance.

Is a Password Vault Automation used?

No. This allows your organization to maintain tighter control over access to sensitive information. Some legacy systems or custom-built applications may not have the necessary APIs or interfaces to support automation, making it challenging to implement password vault automation uniformly across all resources.

Is Multi-Factor Authentication available?

No. PathFactory does not support or enforce the use of MFA for user authentication. In some critical systems or emergency scenarios, MFA might add complexity to the authentication process, potentially delaying access during urgent situations. Older or legacy systems might not be compatible with MFA or might lack the necessary APIs for integration. 

Can administrative accounts be managed in Azure Active Directory?

Yes, administrative accounts can be managed in Azure Active Directory. These administrative accounts have privileged access and should be carefully controlled and monitored to ensure the security of your cloud environment. 

For more detailed information and guidelines on managing administrative accounts in Azure Active Directory, you can refer to the official Microsoft documentation on Azure AD Privileged Identity Management (PIM)

How long can a session be idle before the user is automatically logged out? 

This length of time is determined by your administrator. Administrators set the session timeout in Organization Settings. 

1. To see these settings (if you have Admin permission level), click on your login name and then in the menu that appears, select Organization Settings. 
2. On Organization Settings main view, scroll to the bottom of the page and see options for domain filtering, passwords, and session length as shown in the screen capture below.

Session timeout dropdown list has the following available time options:

• 30 minutes
• 1 hour
• 2 hours
• 4 hours
• 8 hours

3. Lock in your changes by clicking Save. You will see a confirmation message that the settings were saved successfully.