Agilix Learning Suite Release Notes

We are in the process of updating password security requirements for administrator and teacher accounts in Buzz.

As part of this change, administrator and teacher passwords will be checked against known compromised passwords and updated password strength requirements.

Because students range in age and access needs, student password policy requirements will continue to be managed at the domain level.

During the months of July and August, administrators and teachers will begin seeing password reminders when they sign into Buzz or change their password.

When changing or resetting a password, the system checks whether the new password:

1. Meets the required level of password complexity
2. Has appeared in known password breach data

Use these indicators and the Tips to create a strong password when changing your password.

Agilix does not require a specific password format to meet these requirements. For example, users are not required to use a specific number of uppercase letters, lowercase letters, numbers, or symbols. Instead, users can meet the requirement in different ways, such as by using a longer password, a broader mix of characters, or a less predictable phrase.

If you sign users in through the API, or manage passwords programmatically (e.g. Genius SIS, custom automated APIs, etc), this update may affect you. Because these flows don't go through our sign-in UI, the only way to detect a policy failure is by reading the API response.

If you have integrations or automations that use username/password authentication, check these accounts to ensure they can still log in, and update the passwords where necessary.

If a password doesn't meet the requirements when authenticating with the API, the API response returns the following warning or code: PasswordPolicyRequirementsNotMet.

This response includes:

• problemAttribute - The requirement(s) that the password fails to meet (e.g., compromised or pwn password, minimumentropy).
• value - The value the password you've entered has for that requirement.
• minValue or maxValue - The minimum or maximum accepted value for that requirement.

The following calls return these responses:

• Login3 lets you know if your current password meets the requirements when logging in. Learn more
• UpdatePassword lets you know if your new password meets the requirements when changing your password. Learn more
• FinishPasswordReset lets you know if your new password meets the requirements when resetting your password. Learn more

Agilix will start enforcing the use of stronger passwords on the following dates:

• On July 20, Administrators will be required to update their password to one that meets the new requirements before they can continue signing in. Released
• On August 14, Teachers will be required to update their password to one that meets the new requirements before they can continue signing in.

Compromised or easy-to-guess passwords can put administrator and teacher accounts at risk. This update helps reduce that risk by preventing the use of passwords that are known to be unsafe or do not meet current security standards.

Please reach out to Agilix Support with any questions.