Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Next revision Both sides next revision
tutorial:adm:manage_ad [2021/06/24 14:46]
soval [Password mapping] 		tutorial:adm:manage_ad [2021/06/25 06:32]
soval [Forced password change]
Line 165: Line 165:
   * Attribute with password - true   * Attribute with password - true
  
-==== Forced password change ====   +==== Forced password change (User must change password at next logon) ====   
-When mapping AD attributes, it is sometimes useful to be able to set a forced password change option.   +When mapping AD attributes, it is sometimes useful to be able to set a forced password change option. This requirement is often set for two different cases:
- +
-This requirement is often set for two different cases:+
  
 * We need to change the password when logging into AD **for a new user account** * We need to change the password when logging into AD **for a new user account**
Line 178: Line 176:
 2/ If we need to force password change every time password is reset, map attribute pwdLastSet too, but **with checkbox "Include on password" and "Include only when password is changed"** and strategy "Set value as it is".  This can only be set since IdM version 11.0. 2/ If we need to force password change every time password is reset, map attribute pwdLastSet too, but **with checkbox "Include on password" and "Include only when password is changed"** and strategy "Set value as it is".  This can only be set since IdM version 11.0.
  
 +{{:tutorial:adm:user_must_change-password_properties.png|}}
  
 ===== Role for AD ===== ===== Role for AD =====
  • by neznajf