Hi,

 

We are experiencing a problem where users can simply override domain password policy by accessing selfservice URL and click on reset password link.

 

our domain password minimum age is set to 2 and password history to 8, and the reset password function doesn't comply with this even if the password policy is displayed in the page.

 

Any suggestion?