OpenIDM: Implementing a custom password policy
OpenIDM 3.1 comes with several password policies enabled by default. There are often times when you will need to implement additional policies or even modify or extend existing policies. This is a quick guide that will walk you through the basics of implementing your own password policies.
Policies are enabled in the openidm/conf/policy.json file. This file is organized by resources (e.g. managed/user, internal/user, etc). Each resource in turn has a properties section in which policies are defined for a specific attribute (e.g. userName, password, email, etc).
Read more at – OpenIDM: Implementing a custom password policy