User Security Changes Coming to ePermitting Sept. 1, 2024

In our continuous efforts to improve security, we will be enhancing Accela user security, which includes: Requiring more complex passwords as well as standardization for password timeout and account disable time frames.
 
Password Requirements
Beginning September 1st, new password requirements will go into effect. Passwords will now require:

• A minimum of 12 characters
• At least 1 upper-case letter (A,B,C..)
• At least 1 lower-case letter (a,b,c…)
• At least 1 number (0,1,2…)
• You may not use your USER ID as part of your password
• The following special characters are not allowed:   ‘, “, #
• You may not re-use your past five (5) passwords

 
*These changes will apply to ACA users as well
 
Six failed login attempts within 24 hours will result in your account being locked.

In addition to the password requirement changes listed above, we will be standardizing the password timeout (password required to be changed based on the last date it was changed) and account disable timeout (based on the user’s last login date when logging directly into an agency) time frames.

The Kayako knowledgebase article about "How to manually reset a password before it expires," can be found here: https://orepermittinghelp.kayako.com/article/224-manually-resetting-password.

Account Disable Timeout
Account disable timeout is the time period from the user’s last login date (when logging directly into the agency). The user’s last login date is not updated when a user delegates into an agency or when a user logs into the Oregon Inspector App (though we are working with our app developer to see if they might be able to change this setting).
 
As of September 1st, we will be setting the Account Disable Timeout to 365 days for all users with the exception of system users (these are users that are not actually logged into by an individual but are used for integrations such as the apps).  
 
If a user has not logged directly into any agencies where they have a user account within 365 days of the last time they logged directly into that agency, their account will become disabled.
 
If you are a DELEGATE USER (you log into OREGON and use the delegate dropdown to navigate to other cities and/or counties) or an inspector that generally only uses the Oregon Inspector App, please be aware, that in order to prevent your account from becoming disabled, you need to log directly into each of your agencies (must log into back office) at least once every 365 days.
 
Password Timeout
Password timeout timeframes will be set to 180 days for all users with the exception of system users (these are users that are not actually logged into by an individual but are used for integrations such as the apps).  
 
After Sept. 1, you will be prompted to change your password every 180 days (unless you’ve changed it sooner). If it’s been more than 180 days since your last password change as of September 1st, you will be prompted to change it before logging in.
 
If you are a DELEGATE USER, please be aware that passwords are set at the individual agency level (including OREGON) and you will need to log into each of your agencies directly to change the password, if you wish to use the same password in all of your agencies. If you update your OREGON password and then use the agency dropdown to switch to one of your delegate agencies, you will not be able to use the same password that you used for OREGON. You will need to log out of OREGON and log directly into the other agency(ies).
 
It is our recommendation that DELEGATE USERS and app users log directly into each of their agencies when updating their password(s), this will effectively also update the last login date for that agency so that their account will not become disabled.
 
*If you need help with your password or a disabled account, submit a ticket to [email protected]