Step 1: Create a password policy for the Workday population

POST {{apiPath}}/environments/{{envID}}/passwordPolicies

In Step 7: Create a Workday propagation rule, you must provide an expression that selects a population of users to synchronize from Workday. One method (the method used in this use case) selects all users that belong to a particular PingOne population, identified by its population UUID. While an existing PingOne population can be used, this use case creates the population for Step 7 in Step 2: Create a population to synchronize with Workday. Creating a population requires a password policy to apply to users in its population. While an existing PingOne password policy can be used, this use case creates the password policy for Step 2 in this step.

Use POST /environments/{{envID}}/passwordPolicies to create a Workday password policy for the specified environment. The request body specifies values for the properties associated with the password policy.

See the Password policies data model for full property descriptions.

The following password requirements property values cannot be modified, but they can be excluded from the request to turn the requirement off.

The following password requirements property values can be modified, and they can be excluded from the request to turn the requirement off.

The minimum value for maxAgeDays is minAgeDays + 21 (the expiration warning interval).

The following password policy rules can be changed to any positive integer, and these properties can be excluded from the request to turn the requirement off. If history is included, both values, count and retentionDays, must be defined. Likewise, if lockout is included, both values, failureCount and durationSeconds, must be defined.

Password attributes with boolean values such as default, excludesProfileData, notSimilarToCurrent, and excludesCommonlyUsed are required. The rule can be turned on or off by changing the value.

Request Body

{"name"=>"Password Policy for Workday Users {{$timestamp}}", "description"=>"A policy specific to users in the Workday population", "excludesProfileData"=>true, "notSimilarToCurrent"=>true, "excludesCommonlyUsed"=>true, "minComplexity"=>7, "maxAgeDays"=>182, "minAgeDays"=>1, "history"=>{"count"=>8, "retentionDays"=>365}, "lockout"=>{"failureCount"=>3, "durationSeconds"=>900}, "default"=>false}

HEADERS