Configuring banned passwords in Entra External ID (EEID)

The docs. are here.

“To give you flexibility in what passwords are allowed, you can also define a custom banned password list. The custom-banned password list works alongside the global-banned password list to enforce strong passwords in your organisation. Organisational-specific terms can be added to the custom banned password list, such as the following examples:

• Brand names
• Product names
• Locations, such as the company headquarters
• Company-specific internal terms
• Abbreviations that have a specific company meaning
• Months and weekdays with your company’s local languages”

Go to the “Authentication methods” pane under “Password protection”.

Select “Yes” for “Enforce custom list”.

Enter the passwords you want to ban.

Hit Enter at the end of each password. You can enter up to 1000 passwords.

Click “Save”.

The password can be up to 16 characters.

Sign up as a new user.

Validate the OTP, then enter the banned password.

You see:

Note: I use EmailOnDeck to generate temporary email addresses.

All good!