Enforce 90 day password reset

Wade Clairmont
Tera Guru

Since our instance(s) are not directly connected to AD, we are now attempting to enforce a 90 day password expiry for all active users in the system.   I have found where you can expire temp password resets, but not active passwords.

Does anyone out there have a script or similar that can accommodate a notification of password expiry, forcing the user to reset their password on a 90 day basis?   I would have thought that this might be OOB functionality, but alas, wrong again.

Thanks in advance for your assistance.

3 REPLIES 3

Travers M
Mega Guru

igeekforyou
Kilo Expert

This is for all those folks who can no longer reference the Wiki site: https://community.servicenow.com/external-link.jspa?url=http%3A//wiki.servicenow.com/index.php%3Ftit...



Scenario: Customer wants all users to have to reset their password every XX days (in my case, I use 90). Note, this solution is for local accounts accessed without SSO in play.



Solution: You will need


  • A custom date/time field called (Password Last Reset)
  • A Business Rule (to update the user record with that date/time when the password changes)
  • A Scheduled Job (to check to see if that date populated is older than 90 days).


Business Rule


12.png


13.png


Scheduled Job


14.png


Chromilo Amin
Kilo Explorer

"I have found where you can expire temp password resets, but not active passwords". Where do you expire temporary passwords? Thanks