Password Policy in Oracle Fusion HCM

With Password Policy we can set up the rules or conditions for the use of password by all users in your organization.
Navigation and details:

1)       Tools -> Security Console -> User Categories
2)       On the User Category: Details page, click Password Policy 

3)       Click Edit
4)       Set Following Values:

Days Before Password Expiration - The number of days for which a password remains valid. After this period, users must reset their passwords.

Days Before Password Expiry Warning - Specifies when a user is notified that a password is about to expire. 

Hours Before Password Reset Token Expiration- Specifies how long a reset-password link remains active, in the notification email that's sent when users request a password reset. 

Password Complexity - defines a password format

Simple	Must contain at least 8 characters, 1 number. This is the default complexity type.
Complex	Must contain at least 8 characters, 1 uppercase, 1 number
Very Complex	Must contain at least 8 characters, 1 uppercase, 1 number, 1 special character
Custom	Provides the flexibility to specify a combination of parameters to define a custom password. By default, the parameters are populated with predefined set of values to get you started.

 
Disallow last password – Upon enable, this ensure that the new password is different from the last password. 

Administrator can manually reset password – With this Passwords can be either generated automatically or reset manually by the IT Security Manager.