Remeber last passwords of the user. Allow to set policies that the password must to not be repeated.
Martin Lizner's comments:
- Password history - fundamentel question is how to store passwords? Symmetric or HASH? Both has its fors and cons. Personally i prefer HASH since its more secure.
- Password history - should the password history be per Account or per User Identity?