Description
If a Blueprint has the Security payload configured to require password and the Maximum Password Age is set to some value that is not "--", when the Mac running Sonoma 14.0 and reaches the point the password must be reset at next login due to the password policy, macOS 14.0 will not accept any password even if it meets the criteria set.
It is possible to have no criteria set at all, except Maximum Password Age, and macOS 14.0 will not accept any password entered. This has been tested and reproduced with macOS 14.0 and 14.1. The Mac password reset prompt will even present that all criteria are met.
Resolving this Behavior
macOS has fixed this issue post 14.3. To resolve this issue, update macOS.