# TEST: SECURITY-UM-10

## References

* [User Management](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/broken-reference)
* [TEST: SECURITY-UM-01](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-01)
*  [TEST: SECURITY-UM-02](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-02)

## Discussion

A new password and confirmation password must match to be accepted as valid during user creation or password reset.

## Pre-Conditions / Setup

1. User must be logged into an account with policies granted for creating users.
2. Navigate to **Administration Panel / Security / Users / Create User** by clicking the **Create** button on the **Administration Panel / Security / Users / Index** page.

## Actions/Steps

1\. Enter "Clinic\@l123" in the **New Password** textbox.

2\. Enter any string not matching "Clinic\@l123" in the **Confirm Password** textbox.

## Expected Behaviour

* A red error message should appear below the **Confirm Password** textbox stating that "passwords must match". 

![](https://3421852694-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LZ0_pjgTp_kx4hqTZ3a%2F-MdvBPqMCPY3Zln9ERYp%2F-MdvBjXktM4JHmAARyRO%2Fimage.png?alt=media\&token=b0d40d57-9eb9-484e-84ad-1cbc0cf701e7)

* Nothing should occur if all other required fields are provided valid values and the **Save** button is clicked (see [TEST: SECURITY-UM-01](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-01) for successful creation and [TEST: SECURITY-UM-02](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-02) for required fields missing).

![](https://3421852694-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LZ0_pjgTp_kx4hqTZ3a%2F-MdvBPqMCPY3Zln9ERYp%2F-MdvE27d8lcdAkCeohqv%2Fimage.png?alt=media\&token=c9807040-4402-48df-8d37-c6d8809920b3)