{"id":10220,"date":"2018-09-24T06:05:07","date_gmt":"2018-09-24T13:05:07","guid":{"rendered":"https:\/\/www.zubairalexander.com\/stage\/?p=10220"},"modified":"2018-09-24T07:39:31","modified_gmt":"2018-09-24T14:39:31","slug":"azure-active-directory-password-policies","status":"publish","type":"post","link":"https:\/\/www.zubairalexander.com\/blog\/azure-active-directory-password-policies\/","title":{"rendered":"Azure Active Directory Password Policies"},"content":{"rendered":"

The Azure Active Directory (AAD) password policies affect the users in Office 365. If you are an AAD Administrator or an Office 365 Global Administrator, you will find the password policies configuration options documented in this article useful. If your organization allows users to reset their own passwords, then make sure you share this information with the users because it’s important for them to know what they can or cannot do when they use the Self-Service Password Reset (SSPR) feature in AAD.<\/p>\n

According to Microsoft<\/a>, the following password policies and complexity requirements in AAD, that are associated with an Office 365 tenant, apply to all users.<\/p>\n

User Principal Name (UPN) Policies<\/strong><\/h4>\n

A user principle name in AAD (and on-premises Active Directory (AD)) refers to the format that is used to sign in to Active Directory. It looks similar to a user’s email account and is usually (but, not always) the user’s email account. For example, BillGates@Contoso.com<\/strong> is the UPN that Bill would use to sign in to his Active Directory account, whether he is signing in to his Office 365 online portal in the cloud or to his Active Directory on-premises account.<\/p>\n

The following policies apply to both AAD and AD user accounts.<\/p>\n\n\n\n\n\n\n\n
UPN Policies that Apply to Azure Active Directory and On-Premises Active Directory Accounts<\/strong><\/span><\/td>\n<\/tr>\n
Property<\/strong><\/td>\nUPN Requirements<\/strong><\/td>\n<\/tr>\n
Characters allowed<\/td>\n\n
    \n
  • Uppercase characters: A-Z<\/strong><\/li>\n
  • Lowercase characters: a-z<\/strong><\/li>\n
  • Numbers: 0-9<\/strong><\/li>\n
  • Special characters:\u00a0! – _ # . ^ ~<\/strong><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
Characters not allowed<\/td>\n\n
    \n
  • Any “@” character that’s not separating the username from the domain<\/li>\n
  • Can’t contain a period character “.” immediately preceding the “@” symbol<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
Length constraints<\/td>\n\n