JenniferS.60800 (ROR Partners) asked a question.
Change password policy complexity and never expire
I am changing my password policy to require more complex passwords but also no longer require them to change the password every 90 days. I know the complexity change will only take effect on their next password change, but since I'm also turning off the expiration, I want to be sure that passwords that don't meet the new complexity requirements will still require a change at the next 90-day anniversary date. Can anyone confirm that?
Is this for Okta-managed passwords or for use in a Delegated Auth scenario? For Okta at least, my expectation is that this change would simply reset the counter at the system level and not at the individual password level. Meaning each time a user login occurs, I am sure the password age is checked against the policy. When the policy moves up, the validation check does the same. This may be a support ticket to confirm however.
Thanks!
Yes, this is for Okta-managed passwords.