You can enter one or more attributes that the password may not contain.
You can specify the following attributes:
accountID
firstname
fullname
lastname
You can change the allowed set of “must not contain” attributes for passwords in the UserUIConfig configuration object. See Must Not Contain Attributes in Policies for more information.