Overview
This article addresses whether password strength validation takes effect on user import into Auth0 when strict password policies are configured. It details the behavior when imported users have passwords that do not meet these policies.
Applies To
- User import
Solution
Password strength validation is not performed during user import; therefore, the password policies configured in Auth0 do not apply to imported users. The user’s password imports as is. If imported users subsequently go through a password reset flow, the Auth0-configured policies will take effect.