This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.
Password Patterns
The WSO2 Identity Server (IS) allows you to define custom password policies and enforce them at the point of user creation. This topic guides you through configuring a simple custom password policy and enforcing it. You can also have a different password policy for each tenant in a multi-tenant environment.
Start the WSO2 IS server and login to the management console.
Click Resident under Identity Providers found in the Main tab of the management console.
Expand the Password Policies tab.
Expand the Password Patterns tab and select Enable Password Policy Feature. Update the default values and click Update.
To configure a global password policy that applies to all tenants, you can write a custom password policy using the configuration file instead of through the management console. For more information, see Writing a Custom Password Validator.
To record user password history, see Password History Validation.