I would think it'd be possible to remove limits for the user facing password and store it as a secure hash. Then on the integration side transform that hash into something that is compatible with the legacy system.