We have introduced a new feature to prevent users and (admin-web admins) from updating or changing their password to a previously used one. The system now tracks a specified number of old passwords, which can be configured in the "passwordValidationRules" node under the "numberOfIldPasswordsWhichShouldNotBeMatched" setting in the globalXML. This check applies to the following pages: - Reset Password
- Reset/Change the automatically generated password
Additionally. the new configuration offers the following values: - Default: 8
- Maximum: 20
- Minimum: 0
Setting the value to 0 means that the system will not check for any old passwords, allowing users to reuse passwords they have used before. It is important to note that in the case of resetting or changing the automatically generated password, the system will always prevent the reuse of the same generated password. |