<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright (c) 2010-2019 Evolveum
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~     http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->


<!--

This file is an example of Password Policy definition.

-->

<valuePolicy oid="81818181-76e0-59e2-8888-3d4f02d3fffa" xsi:type="c:ValuePolicyType" version="0" xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <name>Numeric PIN Policy - first character not zero</name>
    <description>A policy useful for generating PIN. The first character
is not zero to avoid string to integer conversion losing one the first character.</description>
    <stringPolicy>
        <description>String validation policy</description>
        <limitations>
            <minLength>4</minLength>
            <maxLength>4</maxLength>
            <minUniqueChars>2</minUniqueChars>
            <!-- not implemented yet
             <checkAgainstDictionary>false</checkAgainstDictionary>
             -->
            <checkPattern />
            <limit>
                <description>Numeric characters - first digit (non zero)</description>
                <minOccurs>1</minOccurs>
                <mustBeFirst>true</mustBeFirst>
                <characterClass>
                    <value>123456789</value>
                </characterClass>
            </limit>
            <limit>
                <description>Numeric characters</description>
                <mustBeFirst>false</mustBeFirst>
                <characterClass>
                    <value>1234567890</value>
                </characterClass>
            </limit>
        </limitations>
    </stringPolicy>
</valuePolicy>
