[keycloak-user] customizing password policy

Stian Thorgersen sthorger at redhat.com
Fri Feb 17 05:48:31 EST 2017


https://github.com/keycloak/keycloak/blob/master/server-spi-private/src/main/java/org/keycloak/policy/PasswordPolicySpi.java

On 17 February 2017 at 10:25, Ori Doolman <Ori.Doolman at amdocs.com> wrote:

> Hi,
> I couldn't find any SPI for customizing the password policy.
> In addition to the exiting options (lowercase characters, special
> characters etc.), I have an additional requirement - password should not
> contain any dictionary words.
> I can still have it implemented using the Authenticator SPI -
> https://keycloak.gitbooks.io/server-developer-guide/
> content/topics/auth-spi.html
> The drawback is that it will not be available for configuration from the
> regular realm Authentication -> Password Policy screen.
>
> Is that the proper way to go?
>
> Thanks,
> Ori.
>
> This message and the information contained herein is proprietary and
> confidential and subject to the Amdocs policy statement,
>
> you may review at http://www.amdocs.com/email_disclaimer.asp
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>


More information about the keycloak-user mailing list