Password controls 101… when setting up a new user or resetting a password for an existing user, the system does NOT require the User to change their password.  This is either a bug or a major design flaw.  When a user is set up or a password changed by a help desk user or security administrator, typically they provide that password to the user.  The user, when logging in, normally MUST change their password.  This would be considered a best practice in the design.

In this video, we will demonstrate a new user being set up, then we’ll log in as that user.  We’ll see that the system does NOT require them to change their password upon login. We will log this as a bug / enhancement request and keep you updated as we receive a response from Oracle.

Join the discussion on Linked In here:

https://www.linkedin.com/feed/update/urn:li:activity:6671886998481059840

 If you have any questions, please contact us at info@erpra.net.