When creating a new Active Directory user within Manager, the INSERT job is setting the attribute of "User must change password at next logon" (UserMustChangePassword@ADSAccount - Change password at next login in Manager) even though the configuration parameter below is disabled:
TargetSystem\ADS\Accounts\UserMustChangePassword
Follow the steps below to correct the mapping:
1. Within Synchronization editor load the Active Directory sync project.
2. Click on Mappings.
3. Double-click on user.
4. Under Property mapping rules double-click on UserMustChangePassword.
5. Click the drop-down next to Mapping direction and select Both directions:
6. Click the Ok button.
7. Click on Commit to database to save the change.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center