You can customize PasswordSync behavior by directly editing the following system configuration object attributes:
PasswordSyncResourceExcludeList – This attribute controls whether lists of resource names should always be excluded from synchronization.
PasswordSyncThreshold – If PasswordSync is enabled for a resource for which Waveset can also initiate password changes, you can use this setting to prevent a loop-back password change. When you initiate a password change from Waveset, it will set the password on the resource, and the PasswordSync library will notify Waveset of the change. Waveset will then compare the lastPasswordDate on the user object to the current time. If this difference is less than the PasswordSyncThreshold, Waveset will ignore the password change.