Remediation

1. Open Identity & Security > Domains in the OCI Console and select the affected domain.
2. Open Settings > Password policy and select the affected policy.
3. Select Edit password rules.
4. Set Previous passwords remembered to at least 24. Retain stronger existing settings.
5. Save and verify the setting on each policy, including the domain fallback policy. If a predefined policy cannot be edited, use a custom policy with the required setting and update the affected group assignments.

Communicate the change to users. Confirm users can complete password resets under the new history requirement.