<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright (c) 2017 Evolveum
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~     http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->
<objects xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3">


    <valuePolicy oid="7e032974-e08c-11e5-b9a8-3c970e44b9e2"
xsi:type="c:ValuePolicyType"
xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <name>Very Strong Password Policy</name>
    <description>This Password policy requires at least one lowercase
letter, at least one uppercase letter, at least one digit in the password. The password must start with a lowercase
letter and must be at least 16 characters long.</description>
    <stringPolicy>
        <description>String validation policy</description>
        <limitations>
            <minLength>16</minLength>
            <minUniqueChars>4</minUniqueChars>
            <!-- not implemented yet
             <checkAgainstDictionary>true</checkAgainstDictionary>
             -->
            <checkPattern />
            <limit>
                <description>Lowercase alphanumeric characters</description>
                <minOccurs>1</minOccurs>
                <mustBeFirst>false</mustBeFirst>
                <characterClass>
                    <value>abcdefghijklmnopqrstuvwxyz</value>
                </characterClass>
            </limit>
            <limit>
                <description>Uppercase alphanumeric characters</description>
                <minOccurs>1</minOccurs>
                <mustBeFirst>false</mustBeFirst>
                <characterClass>
                    <value>ABCDEFGHIJKLMNOPQRSTUVWXYZ</value>
                </characterClass>
            </limit>
            <limit>
                <description>Numeric characters</description>
                <minOccurs>1</minOccurs>
                <mustBeFirst>false</mustBeFirst>
                <characterClass>
                    <value>1234567890</value>
                </characterClass>
            </limit>
            <limit>
                <description>Special characters</description>
                <minOccurs>0</minOccurs>
                <mustBeFirst>false</mustBeFirst>
                <characterClass>
                    <value>!"#$%&amp;()*+,-.:;&lt;&gt;?@[]^_{}~</value>
                </characterClass>
            </limit>
        </limitations>
    </stringPolicy>
</valuePolicy>


</objects>
