MultifactorLab/MultiFactor.SelfService.Windows.Portal 1.0.171

on GitHub

Release 14.05.2025 | Password Requirements Checks

New

• Added portal-side password validation before sending the password to AD.
• Added configurable password requirements through the PasswordRequirements section in web.config.

Update

• Updated Password Requirements Description:
  • If there is at least one active requirement (enabled="true") in the new configuration's section file, only the requirements from this section will be displayed on the password change page.

Example configuration:

<passwordRequirements>
<!-- Requirement -->
    <pwd-req enabled="true" condition="upper-case-letters" descriptionEn="Must contain uppercase letters" descriptionRu="Должен содержать заглавные буквы" />
    <pwd-req enabled="true" condition="lower-case-letters" descriptionEn="Must contain lowercase letters" descriptionRu="Должен содержать строчные буквы" />
    <pwd-req enabled="true" condition="digits" descriptionEn="Must contain digits" descriptionRu="Должен содержать цифры" />
    <pwd-req enabled="true" condition="special-symbols" descriptionEn="Must contain special symbols" descriptionRu="Должен содержать специальные символы" />
    <pwd-req enabled="true" condition="min-length" value="3" descriptionEn="Minimum length is 3 characters" descriptionRu="Минимальная длина 3 символа" />
    <pwd-req enabled="true" condition="max-length" value="10" descriptionEn="Maximum length is 10 characters" descriptionRu="Максимальная длина 10 символов" />
<!-- Informational -->
    <pwd-req enabled="true" descriptionEn="Must not duplicate previous passwords" descriptionRu="Не должен повторять ранее использованные пароли" />
</passwordRequirements>