1. Add a password policy to JIRA.
2. Create a user, add user as service desk customer.
3. Log in with user via service desk portal.
4. Change password to something that is not valid for policy.

Expected result: if password does not respect policy, error should be displayed.
Actual result: password is changed. No mention of JIRA password policy.

In JIRA this is covered by:

final Collection<WebErrorMessage> messages = passwordPolicyManager.checkPolicy(user, current, password);
            if (!messages.isEmpty())
            {
                addError("password", getText("changepassword.new.password.rejected"));
                for (WebErrorMessage message : messages)
                {
                    passwordErrors.add(message);
                }

Is this also used in Service Desk?