Hi,
I'm a little concerned about the IMS login procedure.
At the moment users are required to created an account at Connect.bentley.com and use that account as access point into our on Premise Projectwise server.
We have been using the connect Client in several years and my advise for all the new users have allways been to avoid difficult passwords for the Connect Client.
Our company policy is to changes password often, but the IMS license policy isn't controlled by our IT department and the security policy defined by them.
As I see it, we have a security breach here. Will it be possible for me to set up a password renewal period so my users will be requested to update their password every xx weeks or month?
Everybody will be able to access our data if they get their hands on my e-mail address and my Connect Client password - I do not find that safe in terms of security.
Thanks in advance
Ole Bro
Actually, NIST removed the requirement within best practices of constantly rotating passwords. You're better off with a super complex one like JUM!Ni2C3866dEZ@S!j2dQc92r^b*hHw0 and 2/MFA is ultimately the best. You can do MFA with Federation.
Bill