Hi,
Our users are User Acceptance Testing a Keycloak secured website. We have defined strong
password rules.
Our users reported:
"Staff have requested some modifications to how password validation is presented to
the user. Right now if a user submits a password that does not meet all criteria, such as
requiring both an Upper case letter and a number, it will not tell you that both are
required, just that and Upper case letter is required. When that is added, THEN it will
notify you that a number is also needed.
Staff would like the error message to note all issues with the submitted password, or
otherwise note somewhere on the Change Password screen what all the criteria for a proper
password are, so the user does not have to guess."
We could update the template to include all the rules. That is probably the quickest.
Is it possible for Keycloak to return all the unsuccessful rules when it validates a
password?
Thanks!
Dave
Dave Everson | DIVISION OF ENVIRONMENTAL HEALTH
MN.IT Services @ mINNESOTA dEPARTMENT OF hEALTH
651-201-5146 (w) | david.everson@state.mn.us<mailto:david.everson@state.mn.us>
[cid:image001.jpg@01CE4005.70B223E0]<http://www.mn.gov/oet>
Information Technology for Minnesota Government |
mn.gov/oet<http://www.mn.gov/oet>