Enhancing the Password Policy

Our security mandates the following password policy:

1. Special Characters
2. Must be at least 14 characters long
3. Must be at least 48 characters long
4. 1 Upper Case Characters
5. 1 Lower Case Characters
6. 1 Numeric Characters
7. Must not contain the User ID
8. Must not contain FirstName
9. Must not contain LastName

#1,2,3 we can achieve with the existing password policy scheme.
#4,5,6 we can achieve by adding custom password policy
https://www.ibm.com/support/knowledgecenter/en/SS3JSW_5.2.0/com.ibm.help.security.doc/SI_ExampleCustomPasswordPolicy.html
#7,8 and 9 are the GAP. I am creating this enhancement request to add this functionality in the product. Ideally, all can be done through UI without any customization/custom password policy. Also, we have been using Generate Password REST API to generate the password but unfortunately it is not generating the password to match the specific password policy criteria. When checking the site, some other customer has already created an idea for the same: https://watsonsupplychain.ideas.aha.io/ideas/B2BI-I-541 I strongly think we have to revisit the whole User Login / Password story as a whole such as lockout policy or audit requirements etc.,

If users forgot their password, administrators can reset the password, but that password need to be changed and should be forced, there should be an option in the password policy to choose the option. There was another idea associated with this requirement: https://watsonsupplychain.ideas.aha.io/ideas/B2BI-I-654

These really sound basic functionalities any of our customers looking for in the product...additionally adding them into the product will help them to meet the more demanding security requirements.