Question about KDF Iterations

[alfonsojon (Jonathan Alfonso)]

At our organization, we are set to use 100,000 KDF iterations. Following the May update, our end users will be prompted that their KDF iterations are not at the recommended 600,000 iterations. Is there a way we can enforce this change? I understand it needs to happen client-side, but could we possibly require this for our Password Reset-enabled users?

Let me know if this is possible. Thank you!

[cksapp (Kent)]

Currently not as of yet, but there is a current feature request for this to be an enforceable policy. You can vote and add your support there.

Organizations: Let admins determine KDF iterations for users

We are in the process of onboarding an organization and I would like to be able to set a security baseline by having a default KDF iteration count for all accounts on the organization level. Feature name Provide a way for an admin to configure the number of minimum KDF iterations for users within an organization. Feature function Allows admins to configure their organizations to comply with change in recommendations over time (as hash compute capabilities increase, so does the need for inc…