[keycloak-user] Is there a possibility to stop users changing their passwords too often?

Stefan Reuter stefan.reuter at reucon.com
Fri Mar 18 14:45:37 EDT 2016


On 18/03/16 12:58, Stian Thorgersen wrote:
> Seems like a strange requirement. I can see why you would want users to
> update the password frequently, not the other way around. Or is there
> something I'm missing?

This makes sense when combined with a password history policy.
To prevent users from reusing old password you also have to prevent them
from changing the passwords immediately after they were just changed.

=Stefan



More information about the keycloak-user mailing list