Windows Office Hours: September 19, 2024

We have UK Cyber Essentials certification and there is a requirement for passwords to be 12+ characters in length. We can achieve that in hybrid mode but not with Azure AD accounts. i.e. we can create passwords 8 characters in length. Please add a minimum password length to the road map. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-policy#microsoft-entra-password-policies. NB I am *not* referring to password complexity which we definitely don't want and is considered bad practice. https://www.ncsc.gov.uk/files/Cyber-Essentials-Requirements-for-Infrastructure-v3-1-April-2023.pdf so removing that requirement should be available too.