Minimum password security requirements for 

Microsoft Single-Sign-On (SSO) Accounts

Your password must contain

• 15 or more characters
• upper and lower case letters
• a number or symbol (ex. !@#$%^)

Your password must not 

• be any of your last 24 passwords
• be changed more than 1 time in 24 hours
• be similar to your first name, last name, or NetID (if any three characters appear in the same order, it will be rejected)
• be easily guessed (e.g., Roadrunner2025!) or a known compromised password

Standard user accounts do not expire at a set cadence.

For password advice, please see: https://msudenver.teamdynamix.com/TDClient/2313/Portal/KB/ArticleDet?ID=121016