Skip to content

Add Admin Ability to Define a Password Complexity Policy

Problem

As an administrator, I want to be able to define the password policy for my GitLab workspace so that I can ensure my users are meeting password standards.

Note: This password policy would apply to non SSO Gitlab.com accounts only

Originated from #23610 (closed)

Before we can warn users that they may be using a potentially unsafe password, we need more granular password definition controls.

Would affect:

Users upon account create Users when resetting password

Self managed Admin settings SaaS/SM Group owner settings
admin-settings group-settings

Ideas for MVC

PW requirements
PW_settings

Proposal

Figma work file

Add feature to allow admin to create password complexity requirements.

  • Consider 2fa connections
Edited by Daniel Mora