Okta Expression Language Limits In Password Policy Restrictions
Jan 8, 2026
Okta Classic Engine
Okta Identity Engine
Administration
Overview
This article details the character limit and supported functions for Okta Expression Language (OEL) expressions within password policy restrictions.
Applies To
- Password Policies
- Okta Expression Language (OEL)
Solution
Okta enforces a limit of 8,192 characters for Okta Expression Language (OEL) statements in password policy restrictions. There is currently no supported method to increase this limit.
Only the equal and contains functions are supported in these restrictions.
Examples of supported functions:
password.value=="BlockedWord1"
password.value.contains("BlockedWord1")
Functions such as Starts with or Ends with are not supported.
To suggest an increase to the character limit or additional expression flexibility, submit a feature enhancement request on Okta Ideas. For more information on the Ideas program, refer to the Okta Ideas Overview FAQ.
