Set password policies in Apple School Manager
Before users receive their temporary password, you assign each account a role and set its password policy. There are three password policies:
standard password (eight or more numbers and letters)
six-digit passcode
four-digit passcode
For security, the password policy varies depending on the type of role that is assigned to the user.
Any users with a role of Administrator, any Manager, Staff or Instructor must use a standard password. Accounts with a Student role can use a standard password, or a six- or four-digit passcode.
If you have already assigned roles, you can set the password policy for accounts. See Role privileges.
Important: The password_policy value in a Students.csv file uploaded over SFTP overrides the Location password policy and any other password policy previously set. If the password_policy value is left blank in the CSV file, the default password policy for the location can be set as follows:
is used for new accounts
remains unchanged for existing accounts
Password policy scenarios
When student accounts are added to Apple School Manager, the password policy for a particular student may vary, depending on whether the account origin is CSV, manual or SIS.
Origin | CSV password policy | Location password policy | Value used | Editable in Apple School Manager? |
|---|---|---|---|---|
CSV | Yes | None | CSV | No |
CSV | Yes | Yes | CSV | No |
CSV | None | Yes | Location | No |
Manual | N/A | Yes | User’s | Yes |
Manual, then CSV | Yes | No | CSV | No |
Manual, then CSV | No | Yes | User’s | No |
SIS | N/A | Yes | Location | Yes |
Federated authentication | N/A | Set by IdP | Set by IdP | No |
Google Workspace sync | N/A | Set by IdP | Set by IdP | No |
OIDC or SCIM sync | N/A | Set by IdP | Set by IdP | No |
Set the password policy for a user
In Apple School Manager
, sign in with a user that has the role of Administrator, Site Manager or People Manager.Select Users
in the sidebar, then select or search for a user in the search field. See How to search.Select the user from the list.
Select the Edit button
, choose the policy from the Password Policy pop-up menu, then select Save.
Set the password policy for multiple users
You cannot set the password policy for multiple roles; each role requires a specific policy.
In Apple School Manager
, sign in with a user that has the role of Administrator, Site Manager or People Manager.Select Users
in the sidebar, then select or search for users in the search field. See How to search.Select the users from the list.
Select Edit in the Password Policy
row, then select Edit.Change the password policy, then select Continue.
Do one of the following:
Select Activity to view this activity.
Select Done.