PasswordSync-Related Customizations

You can customize PasswordSync behavior by directly editing the following system configuration object attributes:

• PasswordSyncResourceExcludeList – This attribute controls whether lists of resource names should always be excluded from synchronization.

• PasswordSyncThreshold – If PasswordSync is enabled for a resource for which Identity Manager can also initiate password changes, you can use this setting to prevent a loop-back password change. When you initiate a password change from Identity Manager, it will set the password on the resource, and the PasswordSync library will notify Identity Manager of the change. Identity Manager will then compare the lastPasswordDate on the user object to the current time. If this difference is less than the PasswordSyncThreshold, Identity Manager will ignore the password change.