Password Rules

1. Create your System Admin role => Password Rule window => new record.
2. Update the System Admin role => Client window => Technical section => Password Policy field to point to your Password Rule record.
3. Set Password Rule window => fields to "0" if you do not want to apply a given rule.
4. Since, clients are cached, be sure to either reset the cache or restart your server
5. Passwords are validated in the MUser.beforeSave() method. Therefore, using the Reset Password form validates as part of the MUser.save() process.

• There is a System Configurator entry "CHANGE_PASSWORD_MUST_DIFFER" that enforces that passwords must change
• The system keeps a password history (AD_Password_History) and enforces that passwords must not be used twice
• Validation happens in MPasswordRule.validate()