# Password History and Min Password Age Policy in AD do not respect by SailpointIDN

**URL:** <https://developer.sailpoint.com/discuss/t/password-history-and-min-password-age-policy-in-ad-do-not-respect-by-sailpointidn/87472>\
**Category:** SHF Discussion and Questions\
**Tags:** password-policies, password-management, sailpoint-identity-security\
**Created:** [October 31, 2024, 8:24am UTC](https://developer.sailpoint.com/discuss/t/password-history-and-min-password-age-policy-in-ad-do-not-respect-by-sailpointidn/87472 "2024-10-31T08:24:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![rhysallec04](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@rhysallec04](https://developer.sailpoint.com/discuss/u/rhysallec04)\
**Post date:** [October 31, 2024, 8:24am UTC](https://developer.sailpoint.com/discuss/t/password-history-and-min-password-age-policy-in-ad-do-not-respect-by-sailpointidn/87472/1 "2024-10-31T08:24:41Z")

</div>

Hi Everyone,

We’re facing an issue with the password policy in our environment. Specifically, when users change their passwords in SailPoint (PTA), the changes do not adhere to the Active Directory (AD) password policy.

Although we have enabled the “Enforce Password Policy” setting for the AD source in SailPoint, it seems that the system is not capturing the requirements for password history or enforcing the limit of one password change per day.

Any insights or suggestions on how to resolve this issue would be greatly appreciated!

Thank you!

---

<div class="post-metadata">

**Author:** ![jinmartin](https://avatars.discourse-cdn.com/v4/letter/j/3be4f8/32.png) [@jinmartin](https://developer.sailpoint.com/discuss/u/jinmartin)\
**Post date:** [October 31, 2024, 10:38am UTC](https://developer.sailpoint.com/discuss/t/password-history-and-min-password-age-policy-in-ad-do-not-respect-by-sailpointidn/87472/2 "2024-10-31T10:38:29Z")

</div>

Hi, I’m also experiencing this issue right now.  
but for the re-enabled account, password history and maximum limit of reset password attempt is working.

These are the two use cases i tried:

1. Existing user changes password via SailPoint IDN: this cando multiple change of password within the day.
2. User account was re-enabled: admin triggers a reset password for the new identity with re-enabled account, and user change password was succesful but unable to login using the new password, so I tried resetting the password again and the AD policy is working and im receiving this error"_You’ve used that password recently, or it is too soon since your last password change."_

---

<div class="post-metadata">

**Author:** ![wuke1](https://avatars.discourse-cdn.com/v4/letter/w/b77776/32.png) [@wuke1](https://developer.sailpoint.com/discuss/u/wuke1)\
**Post date:** [December 30, 2024, 8:06am UTC](https://developer.sailpoint.com/discuss/t/password-history-and-min-password-age-policy-in-ad-do-not-respect-by-sailpointidn/87472/3 "2024-12-30T08:06:31Z")

</div>

Hi , currently our IIQ 8.4 enforce the limit of one password change per day, we want skip this. Do you have any idea?

No limitation for reset password by spadmin only for self-service.

Thanks!

---

<div class="post-metadata">

**Author:** ![Karthikeyan\_U](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/karthikeyan_u/32/23649_2.png) [@Karthikeyan\_U](https://developer.sailpoint.com/discuss/u/Karthikeyan_U)\
**Post date:** [December 30, 2024, 11:32am UTC](https://developer.sailpoint.com/discuss/t/password-history-and-min-password-age-policy-in-ad-do-not-respect-by-sailpointidn/87472/4 "2024-12-30T11:32:12Z")

</div>

Hi @rhysallec04 ,

SailPoint will not keep the password history to validate that enforcement, mostly it will be validated by the AAD/AD/LDAP. SailPoint can do the base validation including, min and max length, numbers, char, special usage, identity and account attributes usage, and so on.

Regards,  
Karthi

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [February 28, 2025, 11:32am UTC](https://developer.sailpoint.com/discuss/t/password-history-and-min-password-age-policy-in-ad-do-not-respect-by-sailpointidn/87472/5 "2025-02-28T11:32:35Z")

</div>

Closed on February 28, 2025, 11:32am UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.