Creating new user through web interface - force complex password

Question

When creating a new user through the webinterface, the password is generated based on the template configured in the 'user pattern'. The domain password policy can also be read in the webinterface. However, it is still possible to change the password to something that does not meet the complexity requirements (for example '1234'). The user will be created with the 'password not required' flag. (screenshot)

When changing the password for an existing user, the new password entered is checked against the domain password policy.

How can we enforce the same check when creating a user? (Making it impossible to create a user with a non-complex password through the webinterface and preventing the 'password not required' AD attribute being set.)

Answer 1

Hello,

Unfortunately, there is no such built-in functionality. However, you can use the following script from our repository in a business rule triggering Before creating a user: https://www.adaxes.com/script-repository/verify-complexity-requirements-for-user-password-s155.htm.

Comments

Thanks, that prevents the issue and returns a clear error message!