Description
Via an appropriate password policy, it should be possible to disallow a password that is equal to the username.
See also the discussion on the user mailing list [1].
[1] http://syncope-user.1051894.n5.nabble.com/disallow-using-the-username-as-password-td5707884.html