[keycloak-dev] Password policy for "password != username"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, I've asked on the IRC channel, but it seems it's better to have a first discussion here before opening a JIRA and/or sending a PR. I have a requirement in my application, where the user's passwords should meet some complexity. The initial rules will be based on Wildfly's own rules. Two of them I can fulfill via Keycloak, but the third is: "The password must be different from the username". I couldn't find a way to do it with the current policy configuration. So, should this be possible? If so, what would be the syntax? My first suggestion would be "notUsername()". Is this acceptable? Should I open a JIRA and send a PR? - - Juca.