Your organization has decided to implement a new policy that requires all users to reset their passwords every 90 days. How would you configure this policy in Microsoft Entra ID, and what considerations should you take into account to ensure the policy is effective and user-friendly?