Files
docs-v2/manage/access-control/password-rotation.mdx
2025-10-30 17:11:44 -07:00

20 lines
961 B
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
---
title: "Password Rotation"
description: "Configure password expiration and rotation requirements for your organization"
---
By default, Pangolin does not require passwords to be rotated on a regular basis. However, password rotation can be required on a perorganization basis.
### Configuration
<Note>
Password expiry and rotation is an Enterprise Edition only feature.
</Note>
To enable password rotation, go to Organization Settings and select a maximum password age in the Security section. After the configured period expires, users will be prompted to change their password when accessing the organization or its resources.
- Password rotation is enforced on a perorganization basis.
- Password rotation only applies to internal Pangolin user accounts. This policy does not apply to accounts linked to an external identity provider.
- Users who need to change their password will see a prompt directing them to update it before proceeding.