The Identity Manager PasswordSync feature keeps user password changes made on Windows Active Directory domains synchronized with other resources defined in Identity Manager. Plan on installing PasswordSync on each domain controller and backup domain controller in the domains that will be synchronized with Identity Manager.
After installing PasswordSync, you will need to configure Identity Manager to accept PasswordSync change notifications. Depending on the complexity of your environment, PasswordSync can take some time to configure. For this reason, and because PasswordSync is not essential in order to start using Identity Manager, the PasswordSync installation and configuration steps are located together in Chapter 11, PasswordSync, in Sun Identity Manager 8.1 Business Administrator’s Guide.