Best Practices for User Accounts

To safeguard your data, it is important to think about how to keep Destiny secure. First, make sure your district's information security policies apply to Destiny. Follett also recommends the following best practices for user accounts:

• Do not share district and site user accounts (usernames and passwords) among users.
  
  

  Note: One exception is if you use the Shared Account for Follett eBooks for your students (this is set up in Follett Digital Setup and is not a patron record).

• Ensure accounts use real usernames that are assigned to individual users.

• Do not use "password" or your customer number as your password.

• Update Destiny passwords based on district policies.

  Notes: The Destiny Administrator can set up enhanced password policies (District Options > Edit Password Policies). Policies include requiring a strong password, setting a password expiration date, and locking users out based on a number of unsuccessful login attempts. Destiny supports various forms of single sign-on (SSO) for users, including LDAP, SAML, LTI, and Google.