What is the default Password Expiration Policy for Azure AD B2C (I am using Custom Policies) ? How can I set a password expiration policy period and what are the other Password Expiration policies by default ?

Question

What is the default Password Expiration Policy for Azure AD B2C (I am using Custom Policies) ? How can I set a password expiration policy period and what are the other Password Expiration policies by default ?

Ronnie Kapoor 96

James Hamil 27,221 Reputation points Microsoft Employee Moderator

2021-02-24T21:23:47.557+00:00

Hi @Ronnie Kapoor , do you still need help with this issue? If not, please mark the appropriate answer as verified.

Thank you,
James
Bin Xu 0 Reputation points

2024-11-04T23:09:00.59+00:00

Hi James, I still have the issue. Could you share a document fr getting default password policy configuration?
Bin Xu 0 Reputation points

2024-11-04T23:10:56.1+00:00
The default password policy for Microsoft 365 users is built into Azure AD, which provides basic password policies. These policies are:

Minimum password length: 8 characters.

Complexity requirements: The password must contain characters from three of the following four categories:

Uppercase letters (A-Z)

Lowercase letters (a-z)

Numbers (0-9)

Special characters (e.g., !@#$%^&*()_+).

1 answer

Your answer

James Hamil 27,221 Reputation points Microsoft Employee Moderator

2021-02-24T21:23:47.557+00:00

Hi @Ronnie Kapoor , do you still need help with this issue? If not, please mark the appropriate answer as verified.

Thank you,
James
Bin Xu 0 Reputation points

2024-11-04T23:09:00.59+00:00

Hi James, I still have the issue. Could you share a document fr getting default password policy configuration?
Bin Xu 0 Reputation points

2024-11-04T23:10:56.1+00:00

The default password policy for Microsoft 365 users is built into Azure AD, which provides basic password policies. These policies are:

Minimum password length: 8 characters.

Complexity requirements: The password must contain characters from three of the following four categories:

Uppercase letters (A-Z)

Lowercase letters (a-z)

Numbers (0-9)

Special characters (e.g., !@#$%^&*()_+).

Answer 1

James Hamil 27,221 Microsoft Employee Moderator

Hi @Ronnie Kapoor , taking from this thread:

For B2C Local accounts:
NOTE:Local accounts can only be created by sign-up or AAD Graph API. You cannot create it by clicking New users in AAD which is a B2C tenant.

There is no password expiration policy for local accounts by default. Azure AD B2C's sign-up, sign-up or sign-in and password reset policies use the "strong" password strength and don't expire any passwords for local accounts in Azure AD B2C.

Creating an expiration policy in B2C doesn't necessarily enhance security so the feature is not easily available. You can set a complexity and length though. There is more information on why here.

I hope this helps! Please let me know if you have any more questions.

Best,
James

Karikalan Ramakrishn 236 Reputation points

2021-10-19T09:51:48.577+00:00

@Jason Sandys

Sorry, bit confused on this.

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy explains the default password expiry duration is 90 days.
I'm using B2C custom policies, does this SSPR default 90 days not applicable for B2C Local Accounts?
SSPR policy for standard AD users and SSPR B2C tenant user are different?

Could you please clarify this?

Password expiry duration (Maximum password age)
Default value: 90 days.
The value is configurable by using the Set-MsolPasswordPolicy cmdlet from the Azure Active Directory Module for Windows PowerShell.

Thanks.

Share via

What is the default Password Expiration Policy for Azure AD B2C (I am using Custom Policies) ? How can I set a password expiration policy period and what are the other Password Expiration policies by default ?

1 answer

Your answer