Password Policy not Honored During Password Change with Management API

Knowledge Articles
, ,
1

Overview

This article explains why using the Management API to update a password does not honor the password policy when using the PATCH /API/v2/users endpoint.

Applies To

  • Management API
  • Password Policy
  • Password Change

Solution

This is by design. Password policies will not be enforced when users change their passwords with the PATCH /API/v2/users endpoint.

Password policies are only enforced when using the Universal Login’s Password Reset Flow. See Trigger an interactive password reset flow for details on this process.