# Kibana - Password Poolicy Enforcement

**URL:** <https://discuss.elastic.co/t/kibana-password-poolicy-enforcement/210315>\
**Category:** Kibana\
**Created:** [December 3, 2019, 9:13am UTC](https://discuss.elastic.co/t/kibana-password-poolicy-enforcement/210315 "2019-12-03T09:13:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![j\_a\_griffiths](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/j_a_griffiths/32/54323_2.png) [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)\
**Post date:** [December 3, 2019, 9:13am UTC](https://discuss.elastic.co/t/kibana-password-poolicy-enforcement/210315/1 "2019-12-03T09:13:55Z")

</div>

Hi Im trying to determine if there is a way to enforce a basic password policy lets say password length, Uppercase/LowerCase/Numbers and also enforce changing passwords frequently we are using the commercial ECE version 7.4.2 currently

---

<div class="post-metadata">

**Author:** ![markov00](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/markov00/32/33316_2.png) [@markov00](https://discuss.elastic.co/u/markov00)\
**Post date:** [December 30, 2019, 10:23am UTC](https://discuss.elastic.co/t/kibana-password-poolicy-enforcement/210315/2 "2019-12-30T10:23:32Z")

</div>

Hi @j_a_griffiths I can recommend you to use SSO providers (e.g. SAML, OIDC) instead where Identity Providers (like Okta, Auth0) already support these policies.  
There are plan for the future to integrate these policy in ES and are on our roadmap but not in the near term: [https://github.com/elastic/elasticsearch/issues/29913](https://github.com/elastic/elasticsearch/issues/29913)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 27, 2020, 10:23am UTC](https://discuss.elastic.co/t/kibana-password-poolicy-enforcement/210315/3 "2020-01-27T10:23:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
