B2C Customize Password Complexity Through Custom API

Question

Hi @AmanpreetSingh-MSFT ,

I wanted to check if following scenario supported in B2C:

I wanted to call custom API from password reset policy that can send user password to API, so that we can maintain user password history on our end and can implement custom password complexity requirements those are not OOTB in b2c (i.e. enforcing password history not supported in B2C).

I wanted to know is there any way to get password which user is entering and pass it to custom API for further processing and checks? I checked documentation but didn't find it anywhere.

I appreciate if you can help here.

Thanks,
Vikas Tiwari

Answer 1

Hi @Vikas Tiwari · Thank you for reaching out.

Yes, B2C doesn't support Password History requirements out of box. You may refer to this GitHub repo to implement it via custom policy using REST Technical Profile and Key Vault to maintain and validate password history requirement.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.