Skip to main content
I have an org-wide password policy which expires passwords every 90-days. But I also have a user profile with the "never expires" permission for their passwords. Today I had to reset that user's password. Why is this? According to the SF security implementation guide users with the never expires permission are not affected by the org-wide password policy. This is problematic because the user in question here is an API user for an integration.
답변 3개
  1. 2015년 2월 10일 오후 9:27
    And finally - it seems that the reason why you need to do this is if you start with a user with one profile, then switch it to another with a different password policy setting, you must also then reset the password for the change to take. The actual policy used for a given password is whatever policy was in place the last time the password was reset. If you just change the policy, you must also change the password.
0/9000