I have updated my password requirements in the Installation Exit "ValidatePasswordStronger"; increasing the minimum password length from the default of 8 to 10. I also added a requirement that the password must include a special character. This works exactly as it should if a user is forced to change their password when they first log in.
The problem comes when users attempt to change their password from their "My Profile" module. There, they have a related link that reads, "Change Password". When they click on it, it opens a UI Page named $pwd_change. On that page, the update that I made to ValidatePasswordStronger isn't reflected in written rules on that page. They still show the min length of 8 characters. The good news is that the ValidatePasswordStronger works properly, but if the user doesn't see the new requirements, they won't know that they need to abide by them.
So I opened the $pwd_change page and looked through the HTML (I don't know HTML, but if figured I could update some text on it) to see if I could find a line that has "-At least 8 characters" update that 8 with a 10 and steal that code to add another line that shows that the user needs to include a special character in the password. However, looking through the HTML, I can't see how the requirements lines are created, or where the rules text might be coming from. Can anyone guide me to how I can update the $pwd_change UI Page to reflect the new password requirements in the area surrounded by the red box, in the screenshot below?
Thank you.
I discovered that the issue was in Password Reset>Credential Stores. I updated the Password rule hint to reflect the new requirements.
I discovered that the issue was in Password Reset>Credential Stores. I updated the Password rule hint to reflect the new requirements.
