4 ms·
We used to have a shared password. We've moved to identity + role based access control, but some older core pieces still used the shared password. We simply h
by jasonjayr 6y ago
We used to have a shared password.
We've moved to identity + role based access control, but some older core pieces still used the shared password.
We simply have a portal that authenticated users can log into it, and see the current password which is rotated monthly, with a random selection from a series of dictionary words. (which can occasionally produce giggleworthy combinations)
But as the sibling comment says; the right way is to get rid of it entirely.
- millzlane 6y agoours are rotated daily. If you don't have a key on you, you can "break glass" in a portal and get a temp password for 4 hours. We're in the process of phasing out service accounts.