Institutional-level setting to regularly prompt password reset

[rwollner]

I am an admin. For security reasons, I would like to force all Canvas users at our institution to reset their passwords. Ideally, I would be able to set a schedule of how often this happens. However, I am also fine manually doing this process on our own schedule.

Does Canvas do this? I'd like it to first warn the user that they have x number of days to reset their password before they are forced to reset it, then have it force them to reset it.

[mzimmerman]

Hi @rwollner ,

There is not a way to require regular password changes if you are using "local" authentication in Canvas.  Most schools that want to do that kind of thing are also using SAML, LDAP, or some other single sign-on method for authentication, so that they can use the same login information and enforce the same policies for many different campus services.

[rwollner]

Thanks! Sounds like we will be switching to SSO.