Bug: Password Deny List Does Not Support Custom Regular Expressions – SecureAuth Support

Version Affected: All
Bug Number: SAIDP-533
Bug Status: Closed - Fixed
Fixed in Version(s): 24.4.3

Overview

Entering a custom regular expression in the Password Deny List is not honored.

Cause

Prior to version 24.4.3, the Password Deny List did not support entering an arbitrary custom regular expression directly.

Resolution / Workaround

Upgrade to Identity Platform 24.4.3 or later, which adds support for entering a custom regular expression directly in the Password Deny List.

If you cannot upgrade yet, the Password Deny List's Advanced > Regular Expressions panel provides a fixed set of preset patterns — matching word, digit, and whitespace characters, character ranges, anchors, and quantifiers — that can be combined using checkboxes. Check whether combining these presets covers the behavior needed before assuming no option is available.

Password Deny List keyword editor with the Advanced Regular Expressions panel expanded, showing checkbox options for word/digit/whitespace characters, character ranges like a-g, anchors like caret and dollar sign, and quantifiers like a{1,3}.

The screenshot above shows the preset regular expression checkboxes available in the Advanced panel.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.