Is there any way to enforce password policies in SilverStripe?
I assume you mean like minimum length, special characters must be used, must change password each month sort of thing? Nothing in the core for this is the short answer but you could quite easily write your own authenticator subclass (http://api.silverstripe.org/2.4/sapphire/security/Authenticator.html) to check for what rules you want.
Actually there is support in the core via the PasswordValidator class - see http://api.silverstripe.org/2.4/sapphire/security/PasswordValidator.html.
Thank you for the reply.
This requirement has been pushed out but I'll post my findings as soon as I get back to it.
Thanks once again,