CASE PM-178990-19-202765:

Previously, in APR, the flow of Password reset did not take into account the Password History Policy configured in the Active Directory (AD), allowing a user to reset their password using a previously used key. This behavior contradicted the organization’s defined policy, which is intended to prevent the reuse of passwords within the configured history. In contrast, the flow of Password Change it did apply this policy correctly.

Implemented a setting that ensures that the flow of Password reset in APR respect the Password History Policy configured in the Active Directory, preventing the user from using a password previously recorded in their history, consistent with the behavior already existing in the password change flow. View Settings ↪.