Ignoring password history
We have implemented bi-directional password synch in IDM. We want to skip the password history check if the password change event is coming from AD and still check for the password history if user changes the password using IDM. Is there any way in which we can achieve this?
Thanks in advance.
[307 byte] By [
idmgurua] at [2007-11-27 9:50:12]
# 2
Thanks but that would turn off the password history check even when user changes their password using IDM site. Our goal is to ignore the history when password change event comes from DC but consider it when it is happening from the IDM site.Regards,
# 3
Password changes that flow in from the DC will generally come to IM with the name of the Password Sync user, not the real user.
Assuming that you don't use that user for operational work, you could put in a check in the change password workflow(s) so that when the proxy user is changing the password for a user, history check is skipped.
Ankush
