Common use of User Authentication Clause in Contracts

User Authentication. AGENCY will permit access to HMIS only with use of a User authentication system consisting of a username and a password which the User may not share with others. Written information pertaining to User access (e.g., username and password) shall not be stored or displayed in any publicly accessible location. Passwords shall be between eight and twelve characters long and include both letters and numbers. Passwords shall not be, or include the username, the HMIS vendor’s name, the HMIS LEAD name, the AGENCY's name, or consist entirely of any word found in the common dictionary or any of the forenamed words spelled backwards. The use of default passwords on initial entry into the HMIS is allowed so long as the User changes the default password on first use. Individual Users must not be able to log on to more than one workstation at a time, or be able to log on to the network at more than one location at a time. Passwords and usernames shall be consistent with guidelines issued from time to time by HUD and HMIS LEAD. Passwords and usernames shall not be exchanged electronically without HMIS LEAD's approval.