What happens during Downstream Password Policy Enforcement?

During Downstream Password Policy Enforcement, the native system requirements are enforced, which can lead to user confusion. This occurs because the original identity governance policies defined in SailPoint IdentityNow may not align with the specific password policies of different downstream systems. As a result, when users change their passwords, they must adhere to the unique criteria set by these systems, which could be distinct from the standard policies they are accustomed to. This discrepancy can cause confusion when users are presented with varying complexity requirements, expiration rules, or forbidden character sets that differ from what they were expecting based on IdentityNow's policies.

The correct answer highlights a critical aspect of password management in identity governance environments, where handling different systems' requirements becomes essential to ensure secure authentication processes.