web/admin: migrate policies to wizard

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

authentik/core/api/providers.py

@@ -1,18 +1,13 @@
 """Provider API Views"""
 from django.utils.translation import gettext_lazy as _
-from drf_spectacular.utils import extend_schema
 from rest_framework import mixins
-from rest_framework.decorators import action
 from rest_framework.fields import ReadOnlyField
-from rest_framework.request import Request
-from rest_framework.response import Response
 from rest_framework.serializers import ModelSerializer, SerializerMethodField
 from rest_framework.viewsets import GenericViewSet
 
 from authentik.core.api.used_by import UsedByMixin
-from authentik.core.api.utils import MetaNameSerializer, TypeCreateSerializer
+from authentik.core.api.utils import MetaNameSerializer
 from authentik.core.models import Provider
-from authentik.lib.utils.reflection import all_subclasses
 
 
 class ProviderSerializer(ModelSerializer, MetaNameSerializer):
@@ -68,28 +63,3 @@ class ProviderViewSet(
 
     def get_queryset(self):  # pragma: no cover
         return Provider.objects.select_subclasses()
-
-    @extend_schema(responses={200: TypeCreateSerializer(many=True)})
-    @action(detail=False, pagination_class=None, filter_backends=[])
-    def types(self, request: Request) -> Response:
-        """Get all creatable provider types"""
-        data = []
-        for subclass in all_subclasses(self.queryset.model):
-            subclass: Provider
-            data.append(
-                {
-                    "name": subclass._meta.verbose_name,
-                    "description": subclass.__doc__,
-                    "component": subclass().component,
-                    "model_name": subclass._meta.model_name,
-                }
-            )
-        data.append(
-            {
-                "name": _("SAML Provider from Metadata"),
-                "description": _("Create a SAML Provider by importing its Metadata."),
-                "component": "ak-provider-saml-import-form",
-                "model_name": "",
-            }
-        )
-        return Response(TypeCreateSerializer(data, many=True).data)

authentik/policies/expression/models.py

@@ -9,7 +9,7 @@ from authentik.policies.types import PolicyRequest, PolicyResult
 
 
 class ExpressionPolicy(Policy):
-    """Execute arbitrary Python code to implement custom checks and validation."""
+    """Execute arbitrary Python code to implement custom checks and validation."""
 
     expression = models.TextField()
 

schema.yml

@@ -10434,27 +10434,6 @@ paths:
           $ref: '#/components/schemas/ValidationError'
         '403':
           $ref: '#/components/schemas/GenericError'
-  /providers/all/types/:
-    get:
-      operationId: providers_all_types_list
-      description: Get all creatable provider types
-      tags:
-      - providers
-      security:
-      - authentik: []
-      responses:
-        '200':
-          content:
-            application/json:
-              schema:
-                type: array
-                items:
-                  $ref: '#/components/schemas/TypeCreate'
-          description: ''
-        '400':
-          $ref: '#/components/schemas/ValidationError'
-        '403':
-          $ref: '#/components/schemas/GenericError'
   /providers/ldap/:
     get:
       operationId: providers_ldap_list

web/src/locales/de.po

@@ -844,6 +844,12 @@ msgstr "Benutzername prüfen"
 msgid "Check access"
 msgstr "Zugang prüfen"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "Outposts prüfen"
@@ -1196,7 +1202,6 @@ msgstr "Wiederherstellungslink kopieren"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1320,6 +1325,10 @@ msgstr "Benutzer erstellen"
 msgid "Create a new application"
 msgstr "Erstelle eine neue Anwendung"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1340,7 +1349,6 @@ msgstr "Benutzer als inaktiv anlegen"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1633,6 +1641,10 @@ msgstr "Signierzertifikat herunterladen"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "Aufgrund von Protokolleinschränkungen wird dieses Zertifikat nur verwendet, wenn der Outpost einen einzigen Provider hat."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "Dummy-Stage zum Testen verwendet. Zeigt eine einfache Schaltfläche zum Fortfahren und besteht immer."
@@ -1849,6 +1861,15 @@ msgstr "Ereignisprotokoll"
 msgid "Event info"
 msgstr "Ereignis Info"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "Ereignisspeicherung"
@@ -1874,6 +1895,10 @@ msgstr "Ausnahme"
 #~ msgid "Execute"
 #~ msgstr "Ausführen"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "Ablauf ausführen"
@@ -1947,6 +1972,7 @@ msgid "Export flow"
 msgstr "Ablauf exportieren"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1955,6 +1981,10 @@ msgstr "Ablauf exportieren"
 msgid "Expression"
 msgstr "Ausdruck"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2333,6 +2363,14 @@ msgstr "HTTP-Basic Benutzername Schlüssel"
 msgid "HTTPS is not detected correctly"
 msgstr "HTTPS wird nicht korrekt erkannt"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "Zustand und Version"
@@ -2450,6 +2488,12 @@ msgstr "Wenn sich mehrere Anbieter einen Außenposten teilen, wird ein selbstsig
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr "Wenn keine expliziten Umleitungs-URIs angegeben sind, wird die erste erfolgreich verwendete Umleitungs-URI gespeichert."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr ""
@@ -3133,6 +3177,10 @@ msgstr "Ergebnis verneinen"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "Negiert das Ergebnis der Bindung. Nachrichten sind nicht betroffen."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3549,6 +3597,10 @@ msgstr "Übergeordnete Gruppe für alle aus LDAP importierten Gruppen."
 msgid "Pass policy?"
 msgstr "Pass-Richtlinie?"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3558,16 +3610,29 @@ msgstr "Erlauben"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "Passwort"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "Passwortfeld "
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "Passwort festgelegt"
@@ -3673,6 +3738,16 @@ msgstr "Richtlinien-Ausnahme"
 msgid "Policy execution"
 msgstr "Richtlinien-Ausführung"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "Richtlinie {0}"
@@ -3979,6 +4054,7 @@ msgstr "Verwandte Objekte"
 msgid "Remove the user from the current session."
 msgstr "Entfernen Sie den Benutzer aus der aktuellen Sitzung."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "Reputation"
@@ -3993,6 +4069,10 @@ msgstr "Reputation für IP und Benutzerkennungen. Die Punktzahl wird für jede f
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "Reputation für Benutzerkennungen. Die Punktzahl wird für jede fehlgeschlagene Anmeldung verringert und für jede erfolgreiche Anmeldung erhöht."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "Reputations Regelwerke - IPs"
 
@@ -4072,6 +4152,10 @@ msgstr "Zurück zum Home"
 msgid "Return to device picker"
 msgstr "Zurück zur Geräteauswahl"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "Widerrufen?"
@@ -4271,6 +4355,7 @@ msgstr "Wählen Sie eine der folgenden Quellen aus, um sich anzumelden."
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "Es sollten ausgewählte Quellen angezeigt werden, mit denen sich Benutzer authentifizieren können. Dies betrifft nur webbasierte Quellen, nicht LDAP."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/en.po

@@ -843,6 +843,14 @@ msgstr "Check Username"
 msgid "Check access"
 msgstr "Check access"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "Check outposts."
@@ -1204,7 +1212,6 @@ msgstr "Copy recovery link"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1328,6 +1335,10 @@ msgstr "Create User"
 msgid "Create a new application"
 msgstr "Create a new application"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr "Create a new policy."
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr "Create a new provider."
@@ -1348,7 +1359,6 @@ msgstr "Create users as inactive"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1656,6 +1666,10 @@ msgstr "Download signing certificate"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr "Dummy"
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "Dummy stage used for testing. Shows a simple continue button and always passes."
@@ -1880,6 +1894,15 @@ msgstr "Event Log"
 msgid "Event info"
 msgstr "Event info"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr "Event matcher"
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr "Event matcher policy"
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "Event retention"
@@ -1906,6 +1929,10 @@ msgstr "Exception"
 #~ msgid "Execute"
 #~ msgstr "Execute"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr "Execute arbitrary Python code to implement custom checks and validation."
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "Execute flow"
@@ -1980,6 +2007,7 @@ msgid "Export flow"
 msgstr "Export flow"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1988,6 +2016,10 @@ msgstr "Export flow"
 msgid "Expression"
 msgstr "Expression"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr "Expression policy"
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2370,6 +2402,14 @@ msgstr "HTTP-Basic Username Key"
 msgid "HTTPS is not detected correctly"
 msgstr "HTTPS is not detected correctly"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr "Have I been pwned"
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr "Have I been pwned policy"
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "Health and Version"
@@ -2491,6 +2531,14 @@ msgstr "If multiple providers share an outpost, a self-signed certificate is use
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr "If set, users are able to configure details of their profile."
@@ -3182,6 +3230,10 @@ msgstr "Negate result"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "Negates the outcome of the binding. Messages are unaffected."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr "New policy"
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr "New provider"
@@ -3608,6 +3660,10 @@ msgstr "Parent group for all the groups imported from LDAP."
 msgid "Pass policy?"
 msgstr "Pass policy?"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr "Passes when Event matches selected criteria."
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3617,16 +3673,29 @@ msgstr "Passing"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "Password"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr "Password expiry"
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr "Password expiry policy"
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "Password field"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr "Password policy"
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "Password set"
@@ -3734,6 +3803,18 @@ msgstr "Policy exception"
 msgid "Policy execution"
 msgstr "Policy execution"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr "Policy to make sure passwords have certain properties."
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "Policy {0}"
@@ -4047,6 +4128,7 @@ msgstr "Related objects"
 msgid "Remove the user from the current session."
 msgstr "Remove the user from the current session."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "Reputation"
@@ -4063,6 +4145,10 @@ msgstr "Reputation for IP and user identifiers. Scores are decreased for each fa
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr "Reputation policy"
+
 #: src/interfaces/AdminInterface.ts
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "Reputation policy - IPs"
@@ -4146,6 +4232,10 @@ msgstr "Return home"
 msgid "Return to device picker"
 msgstr "Return to device picker"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr "Return true if request IP/target username's score is below a certain threshold."
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "Revoked?"
@@ -4347,6 +4437,7 @@ msgstr "Select one of the sources below to login."
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr "Select type"

web/src/locales/es.po

@@ -834,6 +834,12 @@ msgstr "Verificar nombre de usuario"
 msgid "Check access"
 msgstr "Comprobar acceso"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "Revisa los puestos avanzados."
@@ -1187,7 +1193,6 @@ msgstr "Enlace de recuperación de copia"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1311,6 +1316,10 @@ msgstr "Crear usuario"
 msgid "Create a new application"
 msgstr "Crea una nueva aplicación"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1331,7 +1340,6 @@ msgstr "Crear usuarios como inactivos"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1624,6 +1632,10 @@ msgstr "Descargar certificado de firma"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "Debido a las limitaciones del protocolo, este certificado solo se usa cuando el puesto de avanzada tiene un único proveedor."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "Escenario ficticio utilizado para las pruebas. Muestra un botón de continuar simple y siempre pasa."
@@ -1840,6 +1852,15 @@ msgstr "Registro de eventos"
 msgid "Event info"
 msgstr "Información del evento"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "Retención de eventos"
@@ -1865,6 +1886,10 @@ msgstr "Excepción"
 #~ msgid "Execute"
 #~ msgstr "Ejecutar"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "Ejecutar flujo"
@@ -1938,6 +1963,7 @@ msgid "Export flow"
 msgstr "Flujo de exportación"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1946,6 +1972,10 @@ msgstr "Flujo de exportación"
 msgid "Expression"
 msgstr "Expresión"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2324,6 +2354,14 @@ msgstr "Clave de nombre de usuario básica HTTP"
 msgid "HTTPS is not detected correctly"
 msgstr "HTTPS no se detecta correctamente"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "Salud y versión"
@@ -2441,6 +2479,12 @@ msgstr "Si varios proveedores comparten un puesto avanzado, se utiliza un certif
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr "Si no se especifican URI de redireccionamiento explícitos, se guardará el primer URI de redireccionamiento utilizado correctamente."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr ""
@@ -3126,6 +3170,10 @@ msgstr "Negar el resultado"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "Niega el resultado de la unión. Los mensajes no se ven afectados."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3542,6 +3590,10 @@ msgstr "Grupo principal para todos los grupos importados desde LDAP."
 msgid "Pass policy?"
 msgstr "¿Política de pases?"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3551,16 +3603,29 @@ msgstr "Paso"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "Contraseña"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "Campo de contraseña"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "Conjunto de contraseñas"
@@ -3666,6 +3731,16 @@ msgstr "Excepción de política"
 msgid "Policy execution"
 msgstr "Ejecución de políticas"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "Política {0}"
@@ -3972,6 +4047,7 @@ msgstr "Objetos relacionados"
 msgid "Remove the user from the current session."
 msgstr "Elimina al usuario de la sesión actual."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "Reputación"
@@ -3986,6 +4062,10 @@ msgstr "Reputación de identificadores de usuario e IP. Las puntuaciones disminu
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "Reputación de nombres de usuario. Las puntuaciones disminuyen por cada inicio de sesión fallido y aumentan por cada inicio de sesión exitoso."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "Política de reputación - IPs"
 
@@ -4065,6 +4145,10 @@ msgstr "Regresar a casa"
 msgid "Return to device picker"
 msgstr "Regresar al selector de dispositivos"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "¿Revocado?"
@@ -4264,6 +4348,7 @@ msgstr "Seleccione una de las fuentes a continuación para iniciar sesión."
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "Se deben mostrar las fuentes seleccionadas para que los usuarios se autentiquen con ellas. Esto solo afecta a las fuentes basadas en web, no a LDAP."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/fr_FR.po

@@ -841,6 +841,12 @@ msgstr "Vérifier le nom d'utilisateu"
 msgid "Check access"
 msgstr "Vérifier l'accès"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "Vérifier les avant-postes."
@@ -1199,7 +1205,6 @@ msgstr "Copier le lien de récupération"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1323,6 +1328,10 @@ msgstr "Créer un utilisateu"
 msgid "Create a new application"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1343,7 +1352,6 @@ msgstr "Créer des utilisateurs inactifs"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1641,6 +1649,10 @@ msgstr ""
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "En raison des limitations de protocole, ce certificat n'est utilisé que lorsque l'avant-poste a un unique fournisseur."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "Étape factice utilisée pour les tests. Montre un simple bouton continuer et réussit toujours."
@@ -1863,6 +1875,15 @@ msgstr "Journal d'évènements"
 msgid "Event info"
 msgstr "Information d'évèvement"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "Rétention d'évènement"
@@ -1889,6 +1910,10 @@ msgstr "Exception"
 #~ msgid "Execute"
 #~ msgstr "Exécuter"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "Exécuter le flux"
@@ -1963,6 +1988,7 @@ msgid "Export flow"
 msgstr "Flux d'exportation"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1971,6 +1997,10 @@ msgstr "Flux d'exportation"
 msgid "Expression"
 msgstr "Expression"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2350,6 +2380,14 @@ msgstr "Clé de l'utilisateur HTTP-Basic"
 msgid "HTTPS is not detected correctly"
 msgstr "HTTP n'est pas détecté correctement"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "État et version"
@@ -2471,6 +2509,12 @@ msgstr "Si plusieurs fournisseurs partagent un avant-poste, un certificat auto-s
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr ""
@@ -3157,6 +3201,10 @@ msgstr "Inverser le résultat"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "Inverse le résultat de la liaison. Les messages ne sont pas affectés."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3577,6 +3625,10 @@ msgstr "Groupe parent pour tous les groupes LDAP"
 msgid "Pass policy?"
 msgstr "Réussir la politique ?"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3586,16 +3638,29 @@ msgstr "Réussite"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "Mot de passe"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "Champ mot de passe"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "Mot de passe défini"
@@ -3702,6 +3767,16 @@ msgstr "Exception de politique"
 msgid "Policy execution"
 msgstr "Exécution de politique"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "Poliitique {0}"
@@ -4015,6 +4090,7 @@ msgstr ""
 msgid "Remove the user from the current session."
 msgstr "Supprimer l'utilisateur de la session actuelle."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr ""
@@ -4031,6 +4107,10 @@ msgstr ""
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "Réputation pour les noms d'utilisateur. Les notes sont réduites à chaque échec de connexion, et augmentées à chaque connexion réussie."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #: src/interfaces/AdminInterface.ts
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "Politique de réputation - IPs"
@@ -4113,6 +4193,10 @@ msgstr "Retourner à l’accueil"
 msgid "Return to device picker"
 msgstr "Retourner à la sélection d'appareil"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "Révoqué ?"
@@ -4313,6 +4397,7 @@ msgstr "Sélectionnez l'une des sources ci-dessous pour se connecter."
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "Sélectionnez les sources à afficher aux utilisateurs pour s'authentifier. Cela affecte uniquement les sources web, pas LDAP."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/pl.po

@@ -831,6 +831,12 @@ msgstr "Sprawdź nazwę użytkownika"
 msgid "Check access"
 msgstr "Sprawdź dostęp"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "Sprawdź placówki."
@@ -1184,7 +1190,6 @@ msgstr "Skopiuj link odzyskiwania"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1308,6 +1313,10 @@ msgstr "Utwórz użytkownika"
 msgid "Create a new application"
 msgstr "Utwórz nową aplikację"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1328,7 +1337,6 @@ msgstr "Utwórz użytkowników jako nieaktywnych"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1621,6 +1629,10 @@ msgstr "Pobierz certyfikat podpisywania"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "Ze względu na ograniczenia protokołu ten certyfikat jest używany tylko wtedy, gdy placówka ma jednego dostawcę."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "Atrapa etapu używana do testowania. Pokazuje prosty przycisk kontynuuj i zawsze przechodzi."
@@ -1837,6 +1849,15 @@ msgstr "Dziennik zdarzeń"
 msgid "Event info"
 msgstr "Informacje o zdarzeniu"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "Przechowywanie zdarzeń"
@@ -1862,6 +1883,10 @@ msgstr "Wyjątek"
 #~ msgid "Execute"
 #~ msgstr "Wykonaj"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "Wykonaj przepływ"
@@ -1935,6 +1960,7 @@ msgid "Export flow"
 msgstr "Eksportuj przepływ"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1943,6 +1969,10 @@ msgstr "Eksportuj przepływ"
 msgid "Expression"
 msgstr "Expression "
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2321,6 +2351,14 @@ msgstr "Klucz nazwy użytkownika HTTP-Basic"
 msgid "HTTPS is not detected correctly"
 msgstr "HTTPS nie jest poprawnie wykrywany"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "Zdrowie i wersja"
@@ -2438,6 +2476,12 @@ msgstr "Jeśli wielu dostawców współdzieli placówkę, używany jest certyfik
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr "Jeśli nie zostaną określone żadne jawne identyfikatory URI przekierowania, zostanie zapisany pierwszy pomyślnie użyty identyfikator URI przekierowania."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr ""
@@ -3123,6 +3167,10 @@ msgstr "Neguj wynik"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "Neguje wynik wiązania. Wiadomości pozostają nienaruszone."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3539,6 +3587,10 @@ msgstr "Grupa nadrzędna dla wszystkich grup importowanych z LDAP."
 msgid "Pass policy?"
 msgstr "Przechodzi zasadę?"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3548,16 +3600,29 @@ msgstr "Przechodzący"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "Hasło"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "Pole hasła"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "Hasło ustawione"
@@ -3663,6 +3728,16 @@ msgstr "Wyjątek zasad"
 msgid "Policy execution"
 msgstr "Wykonanie zasad"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "Zasada {0}"
@@ -3969,6 +4044,7 @@ msgstr "Powiązane obiekty"
 msgid "Remove the user from the current session."
 msgstr "Usuń użytkownika z bieżącej sesji."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "Reputacja"
@@ -3983,6 +4059,10 @@ msgstr "Reputacja dla adresów IP i użytkowników. Wyniki są zmniejszane za ka
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "Reputacja dla nazw użytkowników. Wyniki są zmniejszane za każde nieudane logowanie i zwiększane za każde udane logowanie."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "Polityka reputacji - adresy IP"
 
@@ -4062,6 +4142,10 @@ msgstr "Powrót do strony głównej"
 msgid "Return to device picker"
 msgstr "Wróć do wyboru urządzeń"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "Unieważniono?"
@@ -4261,6 +4345,7 @@ msgstr "Wybierz jedno z poniższych źródeł, aby się zalogować."
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "Powinny być wyświetlane wybrane źródła, za pomocą których użytkownicy mogą się uwierzytelniać. Dotyczy to tylko źródeł internetowych, a nie LDAP."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/pseudo-LOCALE.po

@@ -835,6 +835,12 @@ msgstr ""
 msgid "Check access"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr ""
@@ -1194,7 +1200,6 @@ msgstr ""
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1318,6 +1323,10 @@ msgstr ""
 msgid "Create a new application"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1338,7 +1347,6 @@ msgstr ""
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1644,6 +1652,10 @@ msgstr ""
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr ""
@@ -1868,6 +1880,15 @@ msgstr ""
 msgid "Event info"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr ""
@@ -1894,6 +1915,10 @@ msgstr ""
 #~ msgid "Execute"
 #~ msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr ""
@@ -1968,6 +1993,7 @@ msgid "Export flow"
 msgstr ""
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1976,6 +2002,10 @@ msgstr ""
 msgid "Expression"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2358,6 +2388,14 @@ msgstr ""
 msgid "HTTPS is not detected correctly"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr ""
@@ -2479,6 +2517,12 @@ msgstr ""
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr ""
@@ -3168,6 +3212,10 @@ msgstr ""
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3594,6 +3642,10 @@ msgstr ""
 msgid "Pass policy?"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3603,16 +3655,29 @@ msgstr ""
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr ""
@@ -3720,6 +3785,16 @@ msgstr ""
 msgid "Policy execution"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr ""
@@ -4033,6 +4108,7 @@ msgstr ""
 msgid "Remove the user from the current session."
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr ""
@@ -4049,6 +4125,10 @@ msgstr ""
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #: src/interfaces/AdminInterface.ts
 #~ msgid "Reputation policy - IPs"
 #~ msgstr ""
@@ -4132,6 +4212,10 @@ msgstr ""
 msgid "Return to device picker"
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr ""
@@ -4333,6 +4417,7 @@ msgstr ""
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/tr.po

@@ -834,6 +834,12 @@ msgstr "Kullanıcı Adını Kontrol Et"
 msgid "Check access"
 msgstr "Erişimi kontrol"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "İleri üsleri kontrol edin."
@@ -1187,7 +1193,6 @@ msgstr "Kurtarma bağlantısı kopyalama"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1311,6 +1316,10 @@ msgstr "Kullanıcı Oluştur"
 msgid "Create a new application"
 msgstr "Yeni bir uygulama oluştur"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1331,7 +1340,6 @@ msgstr "Kullanıcıları etkin olmayan olarak oluşturma"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1624,6 +1632,10 @@ msgstr "İmzalama sertifikasını indirme"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "Protokol sınırlamaları nedeniyle, bu sertifika yalnızca üssün tek bir sağlayıcısı olduğunda kullanılır."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "Test için kullanılan kukla aşama. Basit bir devam düğmesi gösterir ve her zaman geçer."
@@ -1840,6 +1852,15 @@ msgstr "Olay Günlüğü"
 msgid "Event info"
 msgstr "Olay bilgileri"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "Etkinliği saklama"
@@ -1865,6 +1886,10 @@ msgstr "Hata"
 #~ msgid "Execute"
 #~ msgstr "Yürütme"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "Akışı yürüt"
@@ -1938,6 +1963,7 @@ msgid "Export flow"
 msgstr "Akışı aktar"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1946,6 +1972,10 @@ msgstr "Akışı aktar"
 msgid "Expression"
 msgstr "İfade"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2324,6 +2354,14 @@ msgstr "HTTP-Basic Kullanıcı Adı Anahtarı"
 msgid "HTTPS is not detected correctly"
 msgstr "HTTPS doğru algılanmadı"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "Sağlık ve Versiyon"
@@ -2442,6 +2480,12 @@ msgstr "Birden çok sağlayıcı bir üssü paylaşıyorsa, otomatik olarak imza
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr ""
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr ""
@@ -3127,6 +3171,10 @@ msgstr "Negate sonucu"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "Bağlamanın sonucunu susturur. Mesajlar etkilenmez."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3544,6 +3592,10 @@ msgstr "LDAP'den alınan tüm gruplar için ebeveyn grubu."
 msgid "Pass policy?"
 msgstr "Geçiş ilkesi?"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3553,16 +3605,29 @@ msgstr "Geçiyor"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "Parola"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "Parola alanı"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "Parola seti"
@@ -3668,6 +3733,16 @@ msgstr "İlke hatası"
 msgid "Policy execution"
 msgstr "İlke yürütme"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "İlke {0}"
@@ -3974,6 +4049,7 @@ msgstr "İlgili nesneler"
 msgid "Remove the user from the current session."
 msgstr "Kullanıcıyı geçerli oturumdan kaldırın."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "İtibar"
@@ -3988,6 +4064,10 @@ msgstr "IP ve kullanıcı tanımlayıcıları için itibar. Başarısız olan he
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "Kullanıcı adları için itibar. Başarısız olan her giriş için puanlar azaltılır ve her başarılı oturum açma için artırılır."
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "İtibar ilkesi - IP'ler"
 
@@ -4067,6 +4147,10 @@ msgstr "Eve dön"
 msgid "Return to device picker"
 msgstr "Aygıt seçiciye geri dön"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "İptal mi edildi?"
@@ -4266,6 +4350,7 @@ msgstr "Giriş yapmak için aşağıdaki kaynaklardan birini seçin."
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "Kullanıcıların kimlik doğrulaması için belirli kaynaklar gösterilmelidir. Bu, LDAP'yi değil, yalnızca web tabanlı kaynakları etkiler."
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/zh-Hans.po

@@ -832,6 +832,12 @@ msgstr "检查用户名"
 msgid "Check access"
 msgstr "检查访问权限"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "检查前哨。"
@@ -1184,7 +1190,6 @@ msgstr "复制恢复链接"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1308,6 +1313,10 @@ msgstr "创建用户"
 msgid "Create a new application"
 msgstr "创建新应用程序"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1328,7 +1337,6 @@ msgstr "创建未激活用户"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1621,6 +1629,10 @@ msgstr "下载签名证书"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "由于协议限制，只在前哨有单个提供程序时才使用此证书。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "用于测试的虚拟阶段。显示一个简单的“继续”按钮，并且始终通过。"
@@ -1837,6 +1849,15 @@ msgstr "事件日志"
 msgid "Event info"
 msgstr "事件信息"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "事件保留"
@@ -1862,6 +1883,10 @@ msgstr "异常"
 #~ msgid "Execute"
 #~ msgstr "执行"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "执行流程"
@@ -1935,6 +1960,7 @@ msgid "Export flow"
 msgstr "导出流程"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1943,6 +1969,10 @@ msgstr "导出流程"
 msgid "Expression"
 msgstr "表达式"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2321,6 +2351,14 @@ msgstr "HTTP-Basic 用户名键"
 msgid "HTTPS is not detected correctly"
 msgstr "未正确检测到 HTTPS"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "健康状态与版本"
@@ -2438,6 +2476,12 @@ msgstr "如果多个提供程序共享同一个前哨，则使用自签名证书
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr "如果未指定显式重定向 URI，则将保存第一个成功使用的重定向 URI。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr "设置后，用户可以配置他们个人资料的详细信息。"
@@ -3122,6 +3166,10 @@ msgstr "反转结果"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "反转绑定的结果。消息不受影响。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3537,6 +3585,10 @@ msgstr "从 LDAP 导入的所有组的父组。"
 msgid "Pass policy?"
 msgstr "通过策略？"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3546,16 +3598,29 @@ msgstr "通过"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "密码"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "密码字段"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "密码已设置"
@@ -3661,6 +3726,16 @@ msgstr "策略异常"
 msgid "Policy execution"
 msgstr "策略执行"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "策略 {0}"
@@ -3967,6 +4042,7 @@ msgstr "相关对象"
 msgid "Remove the user from the current session."
 msgstr "从当前会话中移除用户。"
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "信誉"
@@ -3981,6 +4057,10 @@ msgstr "IP 和用户标识符的信誉。每次登录失败分数都会降低，
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "用户名的声誉。每次登录失败分数都会降低，每次登录成功分数都会增加。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "信誉策略 - IP"
 
@@ -4060,6 +4140,10 @@ msgstr "返回主页"
 msgid "Return to device picker"
 msgstr "返回设备选择器"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "已吊销？"
@@ -4259,6 +4343,7 @@ msgstr "选择以下源之一进行登录。"
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "选择的源应显示给用户进行身份验证。这只会影响基于 Web 的源，而不影响 LDAP。"
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/zh-Hant.po

@@ -832,6 +832,12 @@ msgstr "检查用户名"
 msgid "Check access"
 msgstr "检查访问权限"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "检查  outposts."
@@ -1184,7 +1190,6 @@ msgstr "复制恢复链接"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1308,6 +1313,10 @@ msgstr "创建用户"
 msgid "Create a new application"
 msgstr "创建新应用程序"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1328,7 +1337,6 @@ msgstr "将用户创建为非活动用户"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1621,6 +1629,10 @@ msgstr "下载签名证书"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "由于协议限制，只有在 Outpost 有单个提供者时才使用此证书。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "用于测试的虚拟阶段。显示一个简单的 “继续” 按钮，并且始终通过。"
@@ -1837,6 +1849,15 @@ msgstr "事件日志"
 msgid "Event info"
 msgstr "事件信息"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "事件保留"
@@ -1862,6 +1883,10 @@ msgstr "例外"
 #~ msgid "Execute"
 #~ msgstr "执行"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "执行流程"
@@ -1935,6 +1960,7 @@ msgid "Export flow"
 msgstr "出口流程"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1943,6 +1969,10 @@ msgstr "出口流程"
 msgid "Expression"
 msgstr "表情"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2321,6 +2351,14 @@ msgstr "HTTP-Basic 用户名密钥"
 msgid "HTTPS is not detected correctly"
 msgstr "未正确检测到 HTTPS"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "运行状况和版本"
@@ -2438,6 +2476,12 @@ msgstr "如果多个提供商共享一个 Outpost，则使用自签名证书。"
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr "如果未指定显式重定向 URI，则将保存第一个成功使用的重定向 URI。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr "设置后，用户可以配置他们个人资料的详细信息。"
@@ -3122,6 +3166,10 @@ msgstr "否定结果"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "否定绑定的结果。消息不受影响。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3537,6 +3585,10 @@ msgstr "从 LDAP 导入的所有组的父组。"
 msgid "Pass policy?"
 msgstr "通行证政策？"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3546,16 +3598,29 @@ msgstr "通过"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "密码"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "“密码” 字段"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "密码已设置"
@@ -3661,6 +3726,16 @@ msgstr "策略例外"
 msgid "Policy execution"
 msgstr "策略执行"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "策略 {0}"
@@ -3967,6 +4042,7 @@ msgstr "相关对象"
 msgid "Remove the user from the current session."
 msgstr "从当前会话中移除用户。"
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "声誉"
@@ -3981,6 +4057,10 @@ msgstr "IP 和用户标识符的声誉。每次登入失败的分数都会降低
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "用户名的声誉。每次登入失败的分数都会降低，每次成功登入的分数都会增加。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "信誉策略-IP"
 
@@ -4060,6 +4140,10 @@ msgstr "返回主页"
 msgid "Return to device picker"
 msgstr "返回设备选择器"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "已吊销？"
@@ -4259,6 +4343,7 @@ msgstr "选择以下源之一进行登入。"
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "应显示选择的源以供用户进行身份验证。这只会影响基于 Web 的源，而不影响 LDAP。"
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/locales/zh_TW.po

@@ -832,6 +832,12 @@ msgstr "检查用户名"
 msgid "Check access"
 msgstr "检查访问权限"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Check if password is on HaveIBeenPwned's list by uploading the first\n"
+"5 characters of the SHA1 Hash."
+msgstr ""
+
 #: src/pages/admin-overview/cards/SystemStatusCard.ts
 msgid "Check outposts."
 msgstr "检查  outposts."
@@ -1184,7 +1190,6 @@ msgstr "复制恢复链接"
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/BoundPoliciesList.ts
 #: src/pages/policies/PolicyListPage.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/providers/ProviderListPage.ts
@@ -1308,6 +1313,10 @@ msgstr "创建用户"
 msgid "Create a new application"
 msgstr "创建新应用程序"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Create a new policy."
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "Create a new provider."
 msgstr ""
@@ -1328,7 +1337,6 @@ msgstr "将用户创建为非活动用户"
 #: src/pages/flows/BoundStagesList.ts
 #: src/pages/outposts/ServiceConnectionListPage.ts
 #: src/pages/policies/BoundPoliciesList.ts
-#: src/pages/policies/PolicyListPage.ts
 #: src/pages/property-mappings/PropertyMappingListPage.ts
 #: src/pages/sources/SourcesListPage.ts
 #: src/pages/stages/StageListPage.ts
@@ -1621,6 +1629,10 @@ msgstr "下载签名证书"
 msgid "Due to protocol limitations, this certificate is only used when the outpost has a single provider."
 msgstr "由于协议限制，只有在 Outpost 有单个提供者时才使用此证书。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Dummy"
+msgstr ""
+
 #: src/pages/stages/dummy/DummyStageForm.ts
 msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
 msgstr "用于测试的虚拟阶段。显示一个简单的 “继续” 按钮，并且始终通过。"
@@ -1837,6 +1849,15 @@ msgstr "事件日志"
 msgid "Event info"
 msgstr "事件信息"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+#: src/pages/policies/PolicyWizard.ts
+msgid "Event matcher policy"
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "Event retention"
 msgstr "事件保留"
@@ -1862,6 +1883,10 @@ msgstr "例外"
 #~ msgid "Execute"
 #~ msgstr "执行"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Execute arbitrary Python code to implement custom checks and validation."
+msgstr ""
+
 #: src/pages/flows/FlowViewPage.ts
 msgid "Execute flow"
 msgstr "执行流程"
@@ -1935,6 +1960,7 @@ msgid "Export flow"
 msgstr "出口流程"
 
 #: src/pages/events/EventInfo.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -1943,6 +1969,10 @@ msgstr "出口流程"
 msgid "Expression"
 msgstr "表情"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Expression policy"
+msgstr ""
+
 #: src/pages/policies/expression/ExpressionPolicyForm.ts
 #: src/pages/property-mappings/PropertyMappingLDAPForm.ts
 #: src/pages/property-mappings/PropertyMappingNotification.ts
@@ -2321,6 +2351,14 @@ msgstr "HTTP-Basic 用户名密钥"
 msgid "HTTPS is not detected correctly"
 msgstr "未正确检测到 HTTPS"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Have I been pwned policy"
+msgstr ""
+
 #: src/pages/outposts/OutpostListPage.ts
 msgid "Health and Version"
 msgstr "运行状况和版本"
@@ -2438,6 +2476,12 @@ msgstr "如果多个提供商共享一个 Outpost，则使用自签名证书。"
 msgid "If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved."
 msgstr "如果未指定显式重定向 URI，则将保存第一个成功使用的重定向 URI。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"If password change date is more than x days in the past, invalidate the user's password\n"
+"and show a notice."
+msgstr ""
+
 #: src/pages/tenants/TenantForm.ts
 msgid "If set, users are able to configure details of their profile."
 msgstr "设置后，用户可以配置他们个人资料的详细信息。"
@@ -3122,6 +3166,10 @@ msgstr "否定结果"
 msgid "Negates the outcome of the binding. Messages are unaffected."
 msgstr "否定绑定的结果。消息不受影响。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "New policy"
+msgstr ""
+
 #: src/pages/providers/ProviderWizard.ts
 msgid "New provider"
 msgstr ""
@@ -3537,6 +3585,10 @@ msgstr "从 LDAP 导入的所有组的父组。"
 msgid "Pass policy?"
 msgstr "通行证政策？"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Passes when Event matches selected criteria."
+msgstr ""
+
 #: src/pages/applications/ApplicationCheckAccessForm.ts
 #: src/pages/events/EventInfo.ts
 #: src/pages/policies/PolicyTestForm.ts
@@ -3546,16 +3598,29 @@ msgstr "通过"
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/identification/IdentificationStage.ts
 #: src/flows/stages/password/PasswordStage.ts
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/users/ServiceAccountForm.ts
 #: src/pages/users/UserPasswordForm.ts
 msgid "Password"
 msgstr "密码"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry"
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password expiry policy"
+msgstr ""
+
 #: src/pages/policies/hibp/HaveIBeenPwnedPolicyForm.ts
 #: src/pages/policies/password/PasswordPolicyForm.ts
 msgid "Password field"
 msgstr "“密码” 字段"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Password policy"
+msgstr ""
+
 #: src/pages/events/utils.ts
 msgid "Password set"
 msgstr "密码已设置"
@@ -3661,6 +3726,16 @@ msgstr "策略例外"
 msgid "Policy execution"
 msgstr "策略执行"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Policy to make sure passwords have certain properties."
+msgstr ""
+
+#: src/pages/policies/PolicyWizard.ts
+msgid ""
+"Policy used for debugging the PolicyEngine. Returns a fixed result,\n"
+"but takes a random time to process."
+msgstr ""
+
 #: src/pages/policies/BoundPoliciesList.ts
 msgid "Policy {0}"
 msgstr "策略 {0}"
@@ -3967,6 +4042,7 @@ msgstr "相关对象"
 msgid "Remove the user from the current session."
 msgstr "从当前会话中移除用户。"
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/policies/reputation/ReputationListPage.ts
 msgid "Reputation"
 msgstr "声誉"
@@ -3981,6 +4057,10 @@ msgstr "IP 和用户标识符的声誉。每次登入失败的分数都会降低
 #~ msgid "Reputation for usernames. Scores are decreased for each failed login and increased for each successful login."
 #~ msgstr "用户名的声誉。每次登入失败的分数都会降低，每次成功登入的分数都会增加。"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Reputation policy"
+msgstr ""
+
 #~ msgid "Reputation policy - IPs"
 #~ msgstr "信誉策略-IP"
 
@@ -4060,6 +4140,10 @@ msgstr "返回主页"
 msgid "Return to device picker"
 msgstr "返回设备选择器"
 
+#: src/pages/policies/PolicyWizard.ts
+msgid "Return true if request IP/target username's score is below a certain threshold."
+msgstr ""
+
 #: src/elements/oauth/UserRefreshList.ts
 msgid "Revoked?"
 msgstr "已吊销？"
@@ -4259,6 +4343,7 @@ msgstr "选择以下源之一进行登入。"
 msgid "Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP."
 msgstr "应显示选择的源以供用户进行身份验证。这只会影响基于 Web 的源，而不影响 LDAP。"
 
+#: src/pages/policies/PolicyWizard.ts
 #: src/pages/providers/ProviderWizard.ts
 msgid "Select type"
 msgstr ""

web/src/pages/policies/PolicyListPage.ts

@@ -3,7 +3,6 @@ import { t } from "@lingui/macro";
 import { TemplateResult, html } from "lit";
 import { customElement, property } from "lit/decorators.js";
 import { ifDefined } from "lit/directives/if-defined.js";
-import { until } from "lit/directives/until.js";
 
 import { PoliciesApi, Policy } from "@goauthentik/api";
 
@@ -20,6 +19,7 @@ import { TableColumn } from "../../elements/table/Table";
 import { TablePage } from "../../elements/table/TablePage";
 import { groupBy } from "../../utils";
 import "./PolicyTestForm";
+import "./PolicyWizard";
 import "./dummy/DummyPolicyForm";
 import "./event_matcher/EventMatcherPolicyForm";
 import "./expiry/ExpiryPolicyForm";
@@ -129,33 +129,9 @@ export class PolicyListPage extends TablePage<Policy> {
     }
 
     renderToolbar(): TemplateResult {
-        return html` <ak-dropdown class="pf-c-dropdown">
+        return html`<ak-policy-wizard>
-                <button class="pf-m-primary pf-c-dropdown__toggle" type="button">
+                <button slot="trigger" class="pf-c-button pf-m-primary">${t`Create`}</button>
-                    <span class="pf-c-dropdown__toggle-text">${t`Create`}</span>
+            </ak-policy-wizard>
-                    <i class="fas fa-caret-down pf-c-dropdown__toggle-icon" aria-hidden="true"></i>
-                </button>
-                <ul class="pf-c-dropdown__menu" hidden>
-                    ${until(
-                        new PoliciesApi(DEFAULT_CONFIG).policiesAllTypesList().then((types) => {
-                            return types.map((type) => {
-                                return html`<li>
-                                    <ak-forms-modal>
-                                        <span slot="submit"> ${t`Create`} </span>
-                                        <span slot="header"> ${t`Create ${type.name}`} </span>
-                                        <ak-proxy-form slot="form" type=${type.component}>
-                                        </ak-proxy-form>
-                                        <button slot="trigger" class="pf-c-dropdown__menu-item">
-                                            ${type.name}<br />
-                                            <small>${type.description}</small>
-                                        </button>
-                                    </ak-forms-modal>
-                                </li>`;
-                            });
-                        }),
-                        html`<ak-spinner></ak-spinner>`,
-                    )}
-                </ul>
-            </ak-dropdown>
             ${super.renderToolbar()}
             <ak-forms-confirm
                 successMessage=${t`Successfully cleared policy cache`}

web/src/pages/policies/PolicyWizard.ts

@@ -0,0 +1,237 @@
+import { t } from "@lingui/macro";
+
+import { customElement } from "@lit/reactive-element/decorators/custom-element.js";
+import { CSSResult, TemplateResult, html } from "lit";
+
+import PFRadio from "@patternfly/patternfly/components/Radio/radio.css";
+
+import { PoliciesApi } from "@goauthentik/api";
+
+import { DEFAULT_CONFIG } from "../../api/Config";
+import { FormWizardStep } from "../../elements/wizard/FormWizardStep";
+import { Wizard } from "../../elements/wizard/Wizard";
+import { WizardStep } from "../../elements/wizard/WizardStep";
+import "./dummy/DummyPolicyForm";
+import "./event_matcher/EventMatcherPolicyForm";
+import "./expiry/ExpiryPolicyForm";
+import "./expression/ExpressionPolicyForm";
+import "./hibp/HaveIBeenPwnedPolicyForm";
+import "./password/PasswordPolicyForm";
+import "./reputation/ReputationPolicyForm";
+
+export class PolicyInitialStep extends WizardStep {
+    selected = false;
+
+    isValid(): boolean {
+        return this.selected;
+    }
+
+    renderNavList(): TemplateResult {
+        return html`${t`Select type`}`;
+    }
+
+    showDummy = false;
+
+    activeCallback = async () => {
+        new PoliciesApi(DEFAULT_CONFIG).policiesAllTypesList().then((types) => {
+            this.showDummy =
+                types.filter((type) => type.component === "ak-policy-dummy-form").length > 0;
+            this.host.requestUpdate();
+        });
+    };
+
+    render(): TemplateResult {
+        return html`${this.showDummy
+                ? html`<div class="pf-c-radio">
+                      <input
+                          class="pf-c-radio__input"
+                          type="radio"
+                          name="type"
+                          id="dummy"
+                          @change=${() => {
+                              this.host.setSteps(this, new PolicyDummyStep());
+                              this.selected = true;
+                          }}
+                      />
+                      <label class="pf-c-radio__label" for="dummy">${t`Dummy`}</label>
+                      <span class="pf-c-radio__description"
+                          >${t`Policy used for debugging the PolicyEngine. Returns a fixed result,
+    but takes a random time to process.`}</span
+                      >
+                  </div>`
+                : html``}
+            <div class="pf-c-radio">
+                <input
+                    class="pf-c-radio__input"
+                    type="radio"
+                    name="type"
+                    id="event-matcher"
+                    @change=${() => {
+                        this.host.setSteps(this, new PolicyEventMatcherStep());
+                        this.selected = true;
+                    }}
+                />
+                <label class="pf-c-radio__label" for="event-matcher">${t`Event matcher`}</label>
+                <span class="pf-c-radio__description"
+                    >${t`Passes when Event matches selected criteria.`}</span
+                >
+            </div>
+            <div class="pf-c-radio">
+                <input
+                    class="pf-c-radio__input"
+                    type="radio"
+                    name="type"
+                    id="expression"
+                    @change=${() => {
+                        this.host.setSteps(this, new PolicyExpressionStep());
+                        this.selected = true;
+                    }}
+                />
+                <label class="pf-c-radio__label" for="expression">${t`Expression`}</label>
+                <span class="pf-c-radio__description"
+                    >${t`Execute arbitrary Python code to implement custom checks and validation.`}</span
+                >
+            </div>
+            <div class="pf-c-radio">
+                <input
+                    class="pf-c-radio__input"
+                    type="radio"
+                    name="type"
+                    id="password-expiry"
+                    @change=${() => {
+                        this.host.setSteps(this, new PolicyPasswordExpiryStep());
+                        this.selected = true;
+                    }}
+                />
+                <label class="pf-c-radio__label" for="password-expiry">${t`Password expiry`}</label>
+                <span class="pf-c-radio__description"
+                    >${t`If password change date is more than x days in the past, invalidate the user's password
+    and show a notice.`}</span
+                >
+            </div>
+            <div class="pf-c-radio">
+                <input
+                    class="pf-c-radio__input"
+                    type="radio"
+                    name="type"
+                    id="hibp"
+                    @change=${() => {
+                        this.host.setSteps(this, new PolicyHaveIBeenPwnedStep());
+                        this.selected = true;
+                    }}
+                />
+                <label class="pf-c-radio__label" for="hibp">${t`Have I been pwned`}</label>
+                <span class="pf-c-radio__description"
+                    >${t`Check if password is on HaveIBeenPwned's list by uploading the first
+    5 characters of the SHA1 Hash.`}</span
+                >
+            </div>
+            <div class="pf-c-radio">
+                <input
+                    class="pf-c-radio__input"
+                    type="radio"
+                    name="type"
+                    id="password"
+                    @change=${() => {
+                        this.host.setSteps(this, new PolicyPasswordStep());
+                        this.selected = true;
+                    }}
+                />
+                <label class="pf-c-radio__label" for="password">${t`Password`}</label>
+                <span class="pf-c-radio__description"
+                    >${t`Policy to make sure passwords have certain properties.`}</span
+                >
+            </div>
+            <div class="pf-c-radio">
+                <input
+                    class="pf-c-radio__input"
+                    type="radio"
+                    name="type"
+                    id="reputation"
+                    @change=${() => {
+                        this.host.setSteps(this, new PolicyReputationStep());
+                        this.selected = true;
+                    }}
+                />
+                <label class="pf-c-radio__label" for="reputation">${t`Reputation`}</label>
+                <span class="pf-c-radio__description"
+                    >${t`Return true if request IP/target username's score is below a certain threshold.`}</span
+                >
+            </div> `;
+    }
+}
+
+class PolicyDummyStep extends FormWizardStep {
+    renderNavList(): TemplateResult {
+        return html`${t`Event matcher policy`}`;
+    }
+    render(): TemplateResult {
+        return html`<ak-policy-dummy-form></ak-policy-dummy-form>`;
+    }
+}
+
+class PolicyEventMatcherStep extends FormWizardStep {
+    renderNavList(): TemplateResult {
+        return html`${t`Event matcher policy`}`;
+    }
+    render(): TemplateResult {
+        return html`<ak-policy-event-matcher-form></ak-policy-event-matcher-form>`;
+    }
+}
+
+class PolicyPasswordExpiryStep extends FormWizardStep {
+    renderNavList(): TemplateResult {
+        return html`${t`Password expiry policy`}`;
+    }
+    render(): TemplateResult {
+        return html`<ak-policy-password-expiry-form></ak-policy-password-expiry-form>`;
+    }
+}
+
+class PolicyExpressionStep extends FormWizardStep {
+    renderNavList(): TemplateResult {
+        return html`${t`Expression policy`}`;
+    }
+    render(): TemplateResult {
+        return html`<ak-policy-expression-form></ak-policy-expression-form>`;
+    }
+}
+
+class PolicyHaveIBeenPwnedStep extends FormWizardStep {
+    renderNavList(): TemplateResult {
+        return html`${t`Have I been pwned policy`}`;
+    }
+    render(): TemplateResult {
+        return html`<ak-policy-hibp-form></ak-policy-hibp-form>`;
+    }
+}
+
+class PolicyPasswordStep extends FormWizardStep {
+    renderNavList(): TemplateResult {
+        return html`${t`Password policy`}`;
+    }
+    render(): TemplateResult {
+        return html`<ak-policy-password-form></ak-policy-password-form>`;
+    }
+}
+
+class PolicyReputationStep extends FormWizardStep {
+    renderNavList(): TemplateResult {
+        return html`${t`Reputation policy`}`;
+    }
+    render(): TemplateResult {
+        return html`<ak-policy-reputation-form></ak-policy-reputation-form>`;
+    }
+}
+
+@customElement("ak-policy-wizard")
+export class PolicyWizard extends Wizard {
+    header = t`New policy`;
+    description = t`Create a new policy.`;
+
+    steps = [new PolicyInitialStep()];
+
+    static get styles(): CSSResult[] {
+        return super.styles.concat(PFRadio);
+    }
+}

web/src/pages/providers/ProviderListPage.ts

@@ -17,6 +17,10 @@ import "../../elements/forms/ProxyForm";
 import { TableColumn } from "../../elements/table/Table";
 import { TablePage } from "../../elements/table/TablePage";
 import "./ProviderWizard";
+import "./ldap/LDAPProviderForm";
+import "./oauth2/OAuth2ProviderForm";
+import "./proxy/ProxyProviderForm";
+import "./saml/SAMLProviderForm";
 
 @customElement("ak-provider-list")
 export class ProviderListPage extends TablePage<Provider> {