Credentials management policy. It specifies the management details for each supported credentials type. It defines parameters such as credential lifetime. It may define even a very complex schemes for some credential types. E.g. it may define a complete security questions.

Item Summary
Name	Type	Multiplicity	Description
$itemDefinition.Name.LocalPart	container CredentialPolicyType	[0,1]	Common setting applied to all other credentials type.
$itemDefinition.Name.LocalPart	container PasswordCredentialsPolicyType	[0,1]	Structure that specifies policy for password management.
$itemDefinition.Name.LocalPart	container SecurityQuestionsCredentialsPolicyType	[0,1]	Structure that specifies policy for security questions.
$itemDefinition.Name.LocalPart	container NonceCredentialsPolicyType	[0,-1]	Nonce settings used to generate one-time random values.

Items
- $itemDefinition.Name.LocalPart
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Common setting applied to all other credentials type. Any of this setting can be overridden in the individual credentials setting.
- $itemDefinition.Name.LocalPart
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Structure that specifies policy for password management. It is in fact only a simple reference to a password policy.
- $itemDefinition.Name.LocalPart
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Structure that specifies policy for security questions. It actually contains text for the questions (or rather a reference to localization catalog file). But it also contains a policy how the questions can be used, e.g. how many questions to display to a user.
- $itemDefinition.Name.LocalPart
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Nonce settings used to generate one-time random values. Used in self-registration, e-mail-based password reset and possibly also other scenarios.