policy.json revision a60d77aaed3324cd783f4e648fedfecd54f8e551
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster{
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "type" : "text/javascript",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "file" : "bin/defaults/script/policy.js",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "additionalFiles" : [ ],
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "resources" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "resource" : "managed/user/*",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "properties" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "_id",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "cannot-contain-characters",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "forbiddenChars" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "/"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "userName",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "unique"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "no-internal-user-conflict"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "cannot-contain-characters",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "forbiddenChars" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "/"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "password",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "at-least-X-capitals",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "numCaps" : 1
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "at-least-X-numbers",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "numNums" : 1
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "minimum-length",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "minLength" : 8
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "cannot-contain-others",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "disallowedFields" : "userName,givenName,familyName"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "re-auth-required",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "exceptRoles" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "openidm-admin",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "openidm-reg"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "email",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "valid-email-address-format"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "givenName",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "valid-name-format"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "familyName",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "valid-name-format"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "phoneNumber",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "valid-phone-format"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "employeeNumber",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "displayName",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "not-empty"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "securityQuestion",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required-if-configured",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "configBase" : "ui/configuration",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "baseKey" : "configuration.securityQuestions",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "exceptRoles" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "openidm-admin"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "securityAnswer",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "required-if-configured",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "configBase" : "ui/configuration",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "baseKey" : "configuration.securityQuestions",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "exceptRoles" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "openidm-admin"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "minimum-length",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "minLength" : 16
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "re-auth-required",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "exceptRoles" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "openidm-admin",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "openidm-reg"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "name" : "securityAnswerAttempts",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policies" : [
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "policyId" : "max-attempts-triggers-lock-cooldown",
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "params" : {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "max" : 3,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "numMinutes" : 15,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "dateTimeField" : "lastSecurityAnswerAttempt"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster }
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster ]
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster },
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster {
"name" : "lastSecurityAnswerAttempt",
"policies" : [
{
"policyId" : "valid-date"
}
]
},
{
"name" : "passPhrase",
"policies" : [
{
"policyId" : "minimum-length",
"params" : {
"minLength" : 4
}
},
{
"policyId" : "required-if-configured",
"params" : {
"configBase" : "ui/configuration",
"baseKey" : "configuration.siteIdentification",
"exceptRoles" : [
"openidm-admin"
]
}
}
]
}
]
},
{
"resource" : "repo/internal/user/*",
"properties" : [
{
"name" : "_id",
"policies" : [
{
"policyId" : "cannot-contain-characters",
"params" : {
"forbiddenChars" : [
"/"
]
}
}
]
},
{
"name" : "password",
"policies" : [
{
"policyId" : "required"
},
{
"policyId" : "not-empty"
},
{
"policyId" : "at-least-X-capitals",
"params" : {
"numCaps" : 1
}
},
{
"policyId" : "at-least-X-numbers",
"params" : {
"numNums" : 1
}
},
{
"policyId" : "minimum-length",
"params" : {
"minLength" : 8
}
}
]
}
]
}
]
}