title: WSO2 password history limit using SQL Server user store
body: <p>I have a requirement to set Password History limit in WSO2 - IS, i.e if my current password is "password1", and if am trying to changing the password with "password1" again, it should not accept.</p>
  
  <p>If I set my password history limit as "3", then the new password should be different from last 3 password for that particular account.</p>
  
  <p>We are using SQL Server as the user store for WSO2. </p>
  
  <p>Also some previous answers for similar question suggests that I need to implement a custom password policy and add it to wso2. Is that true for version WSO2 IS 4.6.0 ?</p>
  
  <p>Also will this policy apply to both "Forgot your password" and "change password" apis of the wso2 sdk? Or only to change password api?   </p>