BackgroundA customer using webMethods Active Transfer (MFT) 11.1 for managed SFTP services currently supports multiple authentication mechanisms, including:• Username/password authentication• Key-based authentication• LDAP-based authenticationFor username/password accounts, passwords are configured with a defined validity period and must be renewed periodically. While many users authenticate through enterprise directory services, system-based accounts remain necessary for legacy integrations and external business partners that cannot leverage directory-based authentication.Problem StatementwebMethods Active Transfer currently does not provide proactive notifications when passwords are approaching expiration.As a result, administrators must:• Manually monitor password expiration dates• Notify users and integration partners before expiration• Coordinate password renewal activities individually• Troubleshoot service disruptions when credentials expire unexpectedlyThis creates recurring operational overhead and increases the risk of avoidable outages affecting file transfer integrations.Requested EnhancementIntroduce native password lifecycle management features within webMethods Active Transfer, including:1. Automated Password Expiry Notifications • Configurable reminder schedules prior to password expiration • Notifications sent to email addresses associated with the user account • Support for customizable reminder frequencies such as: - Daily reminders beginning a configurable number of days before expiry - Notifications at configurable milestones (e.g., 30, 14, 7, 3, and 1 days before expiry)2. Administrative Configuration • Configurable lead time and notification intervals • Editable email subject and message templates • Dynamic fields such as username and expiry date3. SMTP Integration • Utilize the existing SMTP configuration available within Active Transfer • Support standard enterprise mail infrastructures without additional configuration4. Password Expiry Visibility • Display password expiry date within the administrative user interface • Make expiry information available through APIs and export mechanisms for operational reporting and monitoring5. Audit Logging • Record reminder notifications sent • Record password reset activities • Provide full auditability for operational and compliance purposes6. Self-Service Password Reset • Allow end users to securely reset passwords through the Active Transfer web interface • Reduce support effort and improve customer experienceBusiness ValueThis enhancement would significantly reduce administrative effort, improve operational efficiency, minimize avoidable service interruptions caused by credential expiration, and improve the overall user experience. Similar capabilities are commonly available in enterprise managed file transfer platforms and are frequently expected as part of password lifecycle management functionality.
