❗Custom rule

Use regular expression to define your password policy.

How to add

{
    "type":"regex",
    "regex": "<regex_expression>",
    "description": "password_reset.rules.regex"
}

Example to disallow static and dynamic values

This example will disallow the usage of the static value Name-of-our-company and givenName, sn, sAMAccountName or mail fetched from the SAML ticket in the password.

{
  "type": "regex",
  "regex": "^((?!(?i:${session.givenName})|(?i:${session.sn})|(?i:${session.sAMAccountName})|(?i:${session.mail})|(?i:Name-of-our-company)).)*$",
  "description": "password_reset.rules.regex"
}