[keycloak-user] customizing password policy

[Ori Doolman]

Hi,
I couldn't find any SPI for customizing the password policy.
In addition to the exiting options (lowercase characters, special characters etc.), I have an additional requirement - password should not contain any dictionary words.
I can still have it implemented using the Authenticator SPI - https://keycloak.gitbooks.io/server-developer-guide/content/topics/auth-spi.html
The drawback is that it will not be available for configuration from the regular realm Authentication -> Password Policy screen.

Is that the proper way to go?

Thanks,
Ori.

This message and the information contained herein is proprietary and confidential and subject to the Amdocs policy statement,

you may review at http://www.amdocs.com/email_disclaimer.asp