The LDAP password policy is predefined for LDAP. You can apply this password policy to LDAP user accounts passwords (LDAPAccount.UserPassword) of an LDAP domain or an LDAP container.

If the domains' or containers' password requirements differ, it is recommended that you set up your own password policies for each domain or container.

Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.

The password policy that is to be used for a user account is determined in the following sequence:

1. Password policy of the user account's account definition.

2. Password policy of the user account's manage level.

3. Password policy of the user account's LDAP container.

4. Password policy of the user account's LDAP domain.

5. The One Identity Manager password policy (default policy).

To reassign a password policy

1. In the Manager, select the LDAP > Basic configuration data > Password policies category.

2. Select the password policy in the result list.
3. Select Assign objects.

4. Click Add in the Assignments section and enter the following data.

   • Apply to: Application scope of the password policy.

     To specify an application scope

     1. Click next to the field.

     2. Select one of the following references under Table:

        • The table that contains the base objects of synchronization.

        • To apply the password policy based on the account definition, select the TSBAccountDef table.

        • To apply the password policy based on the manage level, select the TSBBehavior table.

     3. Under Apply to, select the table that contains the base objects.

        • If you have selected the table containing the base objects of synchronization, next select the specific target system.

        • If you have selected the TSBAccountDef table, next select the specific account definition.

        • If you have selected the TSBBehavior table, next select the specific manage level.

     4. Click OK.

   • Password column: Name of the password column.

   • Password policy: Name of the password policy to use.

5. Save the changes.

To change a password policy's assignment

1. In the Manager, select the LDAP > Basic configuration data > Password policies category.

2. Select the password policy in the result list.

3. Select the Assign objects task.

4. In the Assignments pane, select the assignment you want to change.

5. From the Password Policies menu, select the new password policy you want to apply.

6. Save the changes.