We would like to update the password policy to be more restrictive, but in documentation I cannot seem to find information on what happens to existing passwords that do not meet the new policy? Would the users be required to update their password at the first log in after the update? Would all passwords be retired? Would the policy only be applicable to new users?
Any insight would be much appreciated!