Password policy fusion saas

Summary:

We need to ensure our password policy for fusion in direct logon is correct. I can see that custom logic is available eg length of password and complexity. However, how do we enforce after how many days a password expires? In addition - how many attempts is a user allowed before account locks out?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):