Need Urgent Help - Does Proget have password policy for user management?

[david.cheng_0852]

Hi there,

We are using Proget for many years. Our Proget only enabled username/password authentication as we have difficulties to set up AD or SAML authentication.

We need urgent help to know whether Proget has password policy configuration somewhere in the system. We need to show auditors that Proget users follow the password policy to manager their passwords. Can someone please guide us?

Thank you very much in advance,

[atripp]

Hi @david-cheng_0852 ,

ProGet's Built-in User Directory does not have a password policy/restriction.

Thanks,
Alana

[david.cheng_0852]

Thank you, @atripp. Couple of more questions.

• Do you know if Proget has any extensions or third party plug-ins that can add password policy for user directory?

• Does Proget has roadmap to add password policy in the software in the future?

[atripp]

Hi @david-cheng_0852,

This is where using LDAP or SAML comes in; we strongly recommend using that instead, so that users don't have to store/track yet another password.

ProGet's built-in users are really only intended for simple use cases (like ProGet Free edition) or when you're first getting started with ProGet. After that, you should switch to LDAP or SAML.

We can consider adding a password policy, but we'd like to first understand why it's not possible (or too difficult) to use LDAP/SAML.

Thanks,
Alana

[david.cheng_0852]

Thank you, @atripp. Appreciate your suggestions.