Even if you force your users to change their passwords, many will just substitute only a character or two. Enter Azure Active Directory password protection.