Okta Expression Language Limits In Password Policy Restrictions
Last Updated:
Overview
Okta enforces a character limit and restricts the functions supported by Okta Expression Language (OEL) expressions within password policy restrictions. Okta limits OEL statements to 8,192 characters and only supports the equal and contains functions.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Password Policies
- Okta Expression Language (OEL)
Solution
What are the Okta Expression Language limits in password policy restrictions?
Okta enforces a limit of 8,192 characters for Okta Expression Language (OEL) statements in password policy restrictions. Okta does not provide a method to increase this limit. Okta only supports the equal and contains functions in these restrictions. Okta does not support functions such as Starts with or Ends with.
Review the following examples of supported functions:
password.value=="BlockedWord1"password.value.contains("BlockedWord1")To suggest an increase to the character limit or additional expression flexibility, submit a feature enhancement request on Okta Ideas.
