Azure AD | Password

Question

Azure AD | Password

Abhay Chandramouli 1,056

Hi
Can we change Azure AD password complexity ?
I am able to create very simple passwords for users using Graph API

Is there a way to change Azure AD password policies ?

Accepted answer

1 additional answer

Your answer

Answer 1

Vasil Michev 119.6K MVP Volunteer Moderator

No, you cannot configure password complexity, best you can do is toggle the "strong password" requirements, but that still leaves you at 8 char minimum length. You can however redirect the auth process to on-premises AD (pass-trough authentication/AD FS) or external IdP (federation) and have the complexity policies therein apply.

Enabling/forcing multi-factor authentication should alleviate password complexity concerns though, and I strongly recommend you look into implementing MFA, if you haven't done so already.

For the sake of completeness, here are the minimum requirements for Azure AD passwords: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#password-policies-that-only-apply-to-cloud-user-accounts

Abhay Chandramouli 1,056 Reputation points

2022-07-28T16:31:26.347+00:00

So you are saying we cannot change these policies like

say we want minimum 9 characters 2 special characters and atleast one digit
instead of default ?
Vasil Michev 119.6K Reputation points MVP Volunteer Moderator

2022-07-28T18:49:46.41+00:00

That's correct, you cannot customize the complexity requirements.
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2022-07-28T21:30:24.213+00:00

To add to michev's answer, you can also use security defaults or Windows Hello For Business to alleviate some of the password complexity concerns.

I have shared your password complexity customization feedback with the product team, but if you would also like to leave a feature request yourself and include details about your scenario, you can do so on the Ideas forum. https://feedback.azure.com/d365community

Answer 2

Hi @Abhay Chandramouli

Yes we can achieve this.

Kindly login to your azure portal
Go to azure active directory
In left pane click on security under Manage
Click Authentication Method
Click Password Protection

Refer Attached Image below :

Refer Microsoft Doc for further support : https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad

--please don't forget to upvote and Accept as answer if the reply is helpful--

Share via

Azure AD | Password

1 additional answer

Your answer