From a5e91531b717703a6a9fb48369afe4939b4126b5 Mon Sep 17 00:00:00 2001
From: Greg Pfadenhauer <gregpf@navapbc.com>
Date: Wed, 18 Dec 2024 14:56:10 -0500
Subject: [PATCH] Correct credential expiration in ACO-MS (#221)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Credentials expire after 90 days regardless of which portal they were
created in

## 🎫 Ticket
N/A

## 🛠 Changes
Corrected information on when credentials expire

## ℹ️ Context

<!-- Why were these changes made? Add background context suitable for a
non-technical audience. -->

<!-- If any of the following security implications apply, this PR must
not be merged without Stephen Walter's approval. Explain in this section
and add @SJWalter11 as a reviewer.
  - Adds a new software dependency or dependencies.
  - Modifies or invalidates one or more of our security controls.
  - Stores or transmits data that was not stored or transmitted before.
- Requires additional review of security implications for other reasons.
-->

## 🧪 Validation

<!-- How were the changes verified? Did you fully test the acceptance
criteria in the ticket? Provide reproducible testing instructions and
screenshots if applicable. -->
---
 _includes/build/bcda_credentials.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/_includes/build/bcda_credentials.html b/_includes/build/bcda_credentials.html
index a3550df..57d9e0c 100644
--- a/_includes/build/bcda_credentials.html
+++ b/_includes/build/bcda_credentials.html
@@ -18,11 +18,11 @@ <h3 id="create-credentials">Create your credentials</h3>
 
 <h3 id="rotate-credentials">Rotate your credentials</h3>
 <p>Your organization's credentials will expire and deactivate after a set period of time. You can rotate BCDA credentials in the <em>API Credentials</em> page to generate a new, active client ID and secret. </p>
-<p>You'll need to rotate credentials every <strong>90 days</strong> in 4i or every <strong>12 months</strong> in ACO-MS. Once you choose the <em>BCDA Credentials</em> tab, select the rotate icon under the <em>Actions</em> column. </p>
+<p>You'll need to rotate credentials every <strong>90 days</strong> in 4i or ACO-MS. Once you choose the <em>BCDA Credentials</em> tab, select the rotate icon under the <em>Actions</em> column. </p>
 
 <h3 id="revoke-credentials">Revoke your credentials</h3>
 <p>You may need to revoke (deactivate) your organization's credentials if they are leaked or compromised. You can create new credentials as a replacement afterward. </p>
 <p>Revoke BCDA credentials in the <em>API Credentials</em> page. Choose the <em>BCDA Credentials</em> tab, then select the delete (x) icon under the <em>Actions</em> column. </p>
 
 <h3 id="credentials-compromised">If your credentials have been compromised</h3>
-<p>Please revoke or rotate your BCDA credentials immediately. Afterward, notify the BCDA team at <a href="mailto:bcapi@cms.hhs.gov">bcapi@cms.hhs.gov</a> to review recent activity. </p>
\ No newline at end of file
+<p>Please revoke or rotate your BCDA credentials immediately. Afterward, notify the BCDA team at <a href="mailto:bcapi@cms.hhs.gov">bcapi@cms.hhs.gov</a> to review recent activity. </p>