2020-10-16 12:13:02 +00:00
|
|
|
---
|
|
|
|
|
title: Policies
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
### What are policies
|
|
|
|
|
|
2020-10-26 12:54:29 +00:00
|
|
|
Policies are a means of enforcing certain behaviour of ZITADEL.
|
|
|
|
|
ZITADEL defines a default policy on the system level. However an organisation owner can change these aspects within his own organisation.
|
2020-10-16 12:13:02 +00:00
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
### Available policies
|
|
|
|
|
|
2020-10-16 12:13:02 +00:00
|
|
|
Below is a list of available policies
|
|
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
#### Password complexity
|
2020-10-16 12:13:02 +00:00
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
This policy enforces passwords of users within the organization to be compliant.
|
2020-10-16 12:13:02 +00:00
|
|
|
|
|
|
|
|
- min length
|
|
|
|
|
- has number
|
|
|
|
|
- has symbol
|
|
|
|
|
- has lower case
|
|
|
|
|
- has upper case
|
|
|
|
|
|
|
|
|
|
> Screenshot here
|
|
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
#### IAM Access Preference
|
|
|
|
|
|
|
|
|
|
If enabled, this policy enforces that usernames are suffixed with the organisations domain.
|
|
|
|
|
Under normal operation this policy is only false on the `global` organisation, so that users can choose their email as their username.
|
2020-10-16 12:13:02 +00:00
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
Only available for the [IAM Administrator](administrate#ZITADEL_Administrators).
|
2020-10-16 12:13:02 +00:00
|
|
|
|
|
|
|
|
> Screenshot here
|
|
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
#### Login Options
|
2020-10-16 12:13:02 +00:00
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
With this policy it is possible to define what options a user sees in the login process:
|
2020-10-16 12:13:02 +00:00
|
|
|
|
|
|
|
|
- Username Password allowed
|
|
|
|
|
- Self Register allowed
|
|
|
|
|
- External IDP allowed
|
|
|
|
|
- List of allowed external IDPs
|
|
|
|
|
|
|
|
|
|
> Screenshot here
|
|
|
|
|
|
2020-12-01 15:56:33 +00:00
|
|
|
#### Audit policy changes
|
2020-10-16 12:13:02 +00:00
|
|
|
|
|
|
|
|
> Screenshot here
|
|
|
|
|
|
|
|
|
|
### Upcoming Policies
|
|
|
|
|
|
|
|
|
|
- Password age
|
|
|
|
|
- Password failure count
|
