Question:

If a Security Policy is updated from No Expiration to Expiring in a set number of days, when will a user need to update their password in order to log into Vault? 

Answer:

Vault internally keeps track of when a password is reset and when the new limit applies. If the user changed their password outside of the Day range, then the user will be required to update their password in order to log into Vault. 

Related Documentation:

N/A