admm.34308 (Customer) asked a question.
If I have multiple password policies applied to Everyone is the first one in the list applied only or does it apply settings from multiple policies if separate options are selected?
Is the a way to verify in the logs which policy is being applied?
We are seeing some users fail to reset there password and I'm seeing the error "Invalid user state" This article is pointing me to the security question. https://support.okta.com/help/s/article/Self-Service-Password-Reset-shows-Failure-Invalid-User-State-in-the-System-Log?language=en_US
But we don't have the security question required in the first policy that should be applied. but it is enabled in the default policy so I'm not sure if its getting applied somehow or if maybe it's unrelated.
Hello @admm.34308 (Customer),
Good Morning, the password policies are applied separately and according to the multiple policies applied. In addition, you can create additional policies that are less or more restrictive and apply them to users based on group membership.
The logs can show you the sign-on Policy and the password Policy. According to the error provided and the link provided the cause of this problem is the lack of a recovery security question.
You can implement this solution and if you encounter a problem following this procedure you can also reach our service desk. you can learn more about this topic using the links below:
https://help.okta.com/en/prod/Content/Topics/Security/policies/configure-password-policies.htm
https://support.okta.com/help/s/article/Self-Service-Password-Reset-shows-Failure-Invalid-User-State-in-the-System-Log?language=en_US
Please let us know if this was useful and allow you to solve your problem have a great day ahead.
Regards,
Natalia
Okta Inc.
Sorry that is still not clear to me. If there are multiple polices that apply to "everyone" is it just the first that gets applied or a combination of all that are assigned.
I'm not seeing it the logs, is there a specific string I can search for.
thanks for your help