This is a core activity of the Manage My Passwords workflow. The activity allows users to change passwords in AD LDS instances. If you want to enable users to change passwords in several systems, configure the Change password in AD LDS and connected systems activity. For more information on configuring this activity and using One Identity Quick Connect Sync Engine, see Change Password in AD LDS and Connected Systems.
Run this activity only when user must change password at next logon - select this check box when you use this activity in workflows other than Manage My Passwords. By using this option you can force users who are required to change password at next logon to change password while performing other tasks on the Self-Service site.
For example, if you add the Change password in AD LDS activity with this option selected to the My Questions and Answers Profile workflow, you will force users who are required to change password at next logon to change password when creating or updating their Q&A profiles.
Using this activity, you can configure Password Manager to use One Identity Quick Connect to reset passwords in connected systems. If used in conjunction with Quick Connect, Password Manager allows you to enable users and helpdesk operators to manage passwords across a wide variety of connected systems. To be able to integrate Password Manager with Quick Connect, you must have a working knowledge of Quick Connect Sync Engine.
To enable Password Manager to set passwords in connected systems through a Quick Connect server, the account used to access Quick Connect must be a member of the local administrators group on the Quick Connect server.
Before you can configure Password Manager to use a Quick Connect server for cross-platform password synchronization, you must do the following in Quick Connect:
For more information on how to configure Quick Connect to set passwords in connected systems, see One Identity Quick Connect documentation.
To enable Password Manager for cross-platform password synchronization
Include the Reset password in AD LDS and connected systems activity in a workflow and click the activity to edit its settings.
In the Quick Connect server name text box specify the Quick Connect server URL.
Select the account to be used to access the Quick Connect server. You can use either Password Manager Service account or specify another account.
You can use either pre-Windows 2000 logon name (such as DomainName\UserName) or User Principal Name (such as UserName@DomainName.com) to specify the user name.
Specify how you want Password Manager to act when the Quick Connect server is unavailable. To do it, select one of the following and click Next:
Act as if no Quick Connect server was specified. Users can manage their passwords only in the AD LDS instances. No warnings are displayed to users if Quick Connect server is not available.
Alert users and allow them to reset passwords only in AD LDS. Users are notified that other connected data sources are temporarily unavailable, and are allowed to continue managing their passwords only in the AD LDS instances.
Do not allow users to reset passwords. Users cannot perform any password management tasks in AD LDS instances and connected data sources, if the Quick Connect server is not available.
From the list of connected systems, select the systems in which you want to manage user passwords. For each selected system, specify the following options and click Next:
System alias
Reset password in this system independently from AD LDS. Select this option to allow users to reset their passwords in a connected system independently from AD LDS. If you select this option, users will be able to enter different passwords for their accounts in AD LDS and the connected system.
Do not allow resetting password in this system independently from AD LDS. Select this option to prevent users from resetting their passwords in a connected system independently from AD LDS. Note, if you select this option, a user’s password will be reset in the connected system only after the password has been successfully reset in AD LDS. If the user’ password is not reset in AD LDS, it will be not reset in the connected system. Users can specify a different password for the connected system, if you select the Allow users to specify different password for this system option.
To enforce password history in AD LDS instances managed by Password Manager, select the Enforce password history check box. Password history determines the number of unique new passwords that have to be associated with a user account before an old password can be reused.
Click OK to close the wizard.
Using this activity, you can configure Password Manager to use One Identity Quick Connect to reset passwords in connected systems. If used in conjunction with Quick Connect, Password Manager allows you to enable users and helpdesk operators to manage passwords across a wide variety of connected systems. To be able to integrate Password Manager with Quick Connect, you must have a working knowledge of Quick Connect Sync Engine.
To enable Password Manager to set passwords in connected systems through a Quick Connect server, the account used to access Quick Connect must be a member of the local administrators group on the Quick Connect server.
Before you can configure Password Manager to use a Quick Connect server for cross-platform password synchronization, you must do the following in Quick Connect:
For more information on how to configure Quick Connect to set passwords in connected systems, see One Identity Quick Connect documentation.
To enable Password Manager for cross-platform password synchronization
You can use either pre-Windows 2000 logon name (such as DomainName\UserName) or User Principal Name (such as UserName@DomainName.com) to specify the user name.
This activity is a core activity of the Unlock My Account workflow. It allows users to unlock their accounts using the Self-Service site.
You do not need to configure any settings for this activity.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy