Is it possible to change the minimum password length for Azure AD cloud only accounts when using Azure ADDS

Question

I understand that password policies for cloud-only user accounts in Azure do not allow us to change the minimum length from 8 to 10 based on existing Microsoft documentation. I also understand that this would be possible for accounts that are synced from an on-premise AD.

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#password-policies-that-only-apply-to-cloud-user-accounts

We do not have an on premise AD to sync, but we are using Azure Active Directory Domain Services where those cloud-only user accounts are listed. Does the restriction regarding password policy minimum length for cloud only user accounts still remain even if using Azure Active Directory Domain Services?

Answer 1

@Geekn

As per the above link you shared, it is not possible minimum length from 8 to 10 password length.

Password restrictions
A minimum of 8 characters and a maximum of 256 characters.
Requires three out of four of the following:
Lowercase characters.
Uppercase characters.
Numbers (0-9).
Symbols (see the previous password restrictions).

suggest to share on this request to product team.

Please don’t forget to Accept the answer and up-vote wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

What I don't understand, is howcome Microsoft doesn't facilitate following their own recommendations: https://learn.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations

Answer 3

Yes!,

Your Azure account password must consist of
min = 8 characters
max =256 characters
upperCase
lowerCase
numeric characters

Answer 4

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/password-policy