The procedure described under Azure Active Directory group inheritance based on categories can also be used for disabled service plans.
To use inheritance through categories
In the Manager, define the categories in the Azure Active Directory tenant.
In the Manager, assign categories to user accounts through their main data.
In the Manager, assign categories to disabled service plans through their main data.
When new user accounts are created in One Identity Manager, the passwords needed to log in to the target system are created immediately also. Various options are available for assigning the initial password. Predefined password policies are applied to the passwords, and you can adjust these policies to suit your individual requirements if necessary. You can set up email notifications to distribute the login information generated to users.
provides you with support for creating complex password policies, for example, for system user passwords, the employees' central password as well as passwords for individual target systems. Password polices apply not only when the user enters a password but also when random passwords are generated.
Predefined password policies are supplied with the default installation that you can use or customize if required. You can also define your own password policies.
You can customize predefined password policies to meet your own requirements if necessary.
The password policy is applied for logging in to . This password policy defines the settings for the system user passwords (DialogUser.Password and Person.DialogUserPassword) as well as the passcode for a one time log in on the Web Portal (Person.Passcode).
NOTE: The password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts, or system users.
For detailed information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.
An employee's central password is formed from the target system specific user accounts by respective configuration. The Employee central password policy defines the settings for the (Person.CentralPassword) central password. Members of the Identity Management | Employees | Administrators application role can adjust this password policy.
IMPORTANT: Ensure that the Employee central password policy does not violate the target system-specific requirements for passwords.
For detailed information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.
Predefined password policies are provided, which you can apply to the user account password columns of the user accounts.
IMPORTANT: If you do not use password policies that are specific to the target system, the password policy default policy applies. In this case, ensure that the default policy does not violate the target systems requirements.
NOTE: When you update version 7.x to version 8.2.1, the configuration parameter settings for forming passwords are passed on to the target system-specific password policies.
The Azure Active Directory password policy is predefined for Azure Active Directory. You can apply this password policy to Azure Active Directory user accounts (AADUser.Password) of an Azure Active Directory tenant.
If the tenants' password requirements differ, it is recommended that you set up your own password policies for each tenant.
Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.
© ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center
