Coordinate Harvard authentication with Identity & Access Management (IAM) Consult the IAM website for authentication protocol options and guides. For additional assistance, please email iam_help@harvard.edu or submit a ServiceNow ticket under the subcategory of Authentication Services: Consulting. Read more about Coordinate Harvard authentication with Identity & Access Management (IAM)
Store passwords encrypted Store passwords encrypted and log all administrator access to password files; for ActiveDirectory, use whole disk encryption on domain controllers that are not in a secure location.
Store passwords as seeded/salted hashes Store passwords as seeded/salted hashes (for example, by using bcrypt). On Windows reversible encryption must be disabled. More information. Read more about Store passwords as seeded/salted hashes