If you have strong hashing that makes it costly to brute force passwords, I think this should be enough for most users.

Also, there is little evidence that entropy increases all that much when you force users to choose very long passwords.