# PasswordCredentialsPolicyType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Supertype: CredentialPolicyType
Structure that specifies policy for password management. It is in fact only a simple reference to a password policy.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
storageMethod | container CredentialsStorageMethodType | [0,1] | Method used to store the values of this credential (encrypted, hashed, .
resetMethod | container CredentialsResetMethodType | [0,1] | Specifies the method of resetting the credential.
propagationUserControl | property CredentialsPropagationUserControlType | [0,1] |
minOccurs | property string | [0,1] |
maxOccurs | property string | [0,1] |
maxAge | property duration | [0,1] |
minAge | property duration | [0,1] |
warningBeforeExpirationDuration | property duration | [0,1] |
lockoutMaxFailedAttempts | property int | [0,1] |
lockoutFailedAttemptsDuration | property duration | [0,1] |
lockoutDuration | property duration | [0,1] |
valuePolicyRef | reference ObjectReferenceType | [0,1] | Reference to the value policy for the credential.
historyLength | property int | [0,1] |
historyStorageMethod | container CredentialsStorageMethodType | [0,1] | Method used to store historical values of the credential (encrypted, hashed, .
passwordPolicyRef | reference ObjectReferenceType | [0,1] | Reference to the password policy settings.
passwordChangeSecurity | property PasswordChangeSecurityType | [0,1] |
passwordHistoryLength | property int | [0,1] | The number of entries to keep in the password history.

- ### Items

  - #### storageMethod

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Method used to store the values of this credential (encrypted, hashed, ...) If storage method is not specified it defaults to encryption (due to compatibility and convenience reasons).

  - #### resetMethod

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Specifies the method of resetting the credential. This usually applies to a self-service credential reset.

  - #### propagationUserControl

    Flags: RAM,runtime,AVals:2

    Multiplicity: [0,1]

  - #### minOccurs

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### maxOccurs

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### maxAge

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### minAge

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### warningBeforeExpirationDuration

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### lockoutMaxFailedAttempts

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### lockoutFailedAttemptsDuration

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### lockoutDuration

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### valuePolicyRef

    Flags: RAM

    Multiplicity: [0,1]

    Reference to the value policy for the credential.

  - #### historyLength

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### historyStorageMethod

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Method used to store historical values of the credential (encrypted, hashed, ...) If storage type is not specified then it defaults to hashing.

  - #### passwordPolicyRef

    Flags: RAM

    Multiplicity: [0,1]

    Reference to the password policy settings. DEPRECATED. Use valuePolicyRef instead.

  - #### passwordChangeSecurity

    Flags: RAM,runtime,AVals:2

    Multiplicity: [0,1]

  - #### passwordHistoryLength

    Flags: RAM,runtime

    Multiplicity: [0,1]

    The number of entries to keep in the password history. Also specifies the number of past passwords that will be checked before accepting a new password change. DEPRECATED. use historyLength instead. This is not even implemented. It does not work.