nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

ArcGIS Portal: Enhancement to not accept passwords having special characters for the Initial Administrator Account

AryamanBhattacharya_BeansAI

As part of security best practices, I recently updated the password for the Initial Administrator account for our ArcGIS Enterprise Portal. The password contains special characters. However, there is a character limit restriction (ESRI documentation hyperlinked) which prohibits using special characters in passwords specifically for the Initial Administrator account. Any other administrator account does not have this restriction.

The impact isn't as severe though from my observations. Occasionally, one might encounter the "Too many invalid logins. Try again after 15 minutes error".

Proposed product enhancement: Do not accept Initial Administrator account passwords not adhering to the character limitations.

Find more posts tagged with

Status: Open

Comments

JoshuaBixby

I think the better option would be not having such drastic character restrictions in the first place. Some of the existing restrictions feel like we are back in the 1990s, or at least early 2000s.

JonathanQuinn

The initial administrator account credentials are used in two places; they're set as the admin user for the internal database and also for a portal user with the Administrator role. The restriction is actually in the database; it only accepts certain characters for the password. Once that's created, you are able to change the password to whatever you need to for the portal user. That doesn't change the password for the database user.

The documentation can be updated to expand on the difference and information on changing the portal user password after.