SSPR - Password Cannot be Reset Failure Message

[GBS-IT]

Within the Password Reset Portal, when the user fails to reset their password due to either matching the black list or domain \ passwordstate password policy.

Can the error message:

 

1) - stay on screen for longer i.e 30 seconds. At the moment it goes away after about 2-3 seconds

2) be specific for which policy it failed against. i) domain policy ii) passwordstate policy iii) Have I been Pwned API.

Tested this works for all situations and the generic message you configure is the same.

Thanks,

Rob.