Can I set a password policy on atlassian access to prevent the user from using previous password

[Aya AlJboor]

I want to set our own password policy on Atlassian access and would like to check if there is a possibility to prevent the user from using a number of previous passwords.

in the below link, there is nothing mentioned if I can add this policy or not:

https://www.atlassian.com/software/access/guide/authentication-policies#why-apply-multiple-authentication-policies 

[Craig Castle-Mead]

Hi @Aya AlJboor 

https://support.atlassian.com/security-and-access-policies/docs/understand-authentication-policies/ outlines the options available for auth policies, and there is no option to stop password reuse.

If you connect Access to an external IDP (Okta/AzureAD etc), then you can likely enforce this type of policy within the IDP and Access will inherit this rule.

CCM

[Craig Castle-Mead]

https://jira.atlassian.com/browse/ACCESS-568 Is the JAC for this type of feature, but it’s closed as won’t fix.