The default password policy implementation does not provide password rules validation. If Password security is enabled and user has provided the custom implementation of the IPasswordRule interface, then the password is validated as follows:
Whenever a new password is added for a user
When a user's password is changed
Portal invokes the custom implemented password rules to validate the entered password. If the password is invalid as per the password rules set in the policy, then an error message is displayed.
Note: You cannot provide a password that violates any of the password rules.
The password validation feature impacts the following modules in portal.
Whenever a new password is added for a user
