Password must meet complexity requirements active directory. For example, you may use a user flow .