diff --git a/docs/documentation/server_admin/topics/authentication/password-policies.adoc b/docs/documentation/server_admin/topics/authentication/password-policies.adoc index 09fd4816e4..219101d6ea 100644 --- a/docs/documentation/server_admin/topics/authentication/password-policies.adoc +++ b/docs/documentation/server_admin/topics/authentication/password-policies.adoc @@ -15,10 +15,12 @@ When {project_name} creates a realm, it does not associate password policies wit Password policy image:images/password-policy.png[Password Policy] -After saving the policy, {project_name} enforces the policy for new users and sets an Update Password action for existing users to ensure they change their password the next time they log in. For example: +After saving the policy, {project_name} enforces the policy for new users. -.Failed password policy -image:images/failed-password-policy.png[Failed Password Policy] +[NOTE] +==== +The new policy will not be effective for existing users. Therefore, make sure that you set the password policy from the beginning of the realm creation or add "Update password" to existing users or use "Expire password" to make sure that users update their passwords in next "N" days, which will actually adjust to new password policies. +==== ==== Password policy types