(6893680) Web Space configured with OpenSSO: Change password in Web Space takes no effect

• Description

  When Web Space Server is configured to authenticate users through OpenSSO, changing a Web Space Server user password through the Web Space My Account portlet does not propagate the changed password to the OpenSSO server.

  The My Account portlet comes from Liferay, and all authentication mechanisms provided by Liferay have the same issue. It is expected that if anything other than default authentication mechanism is used, changing the password field in control panel will not have an effect. This is a known limitation with using external SSO solutions in general; user attributes that are controlled by OpenSSO (user name, password, and so forth) should not be editable when an external SSO solution is enabled, or it should redirect to the SSO server's UI.

• Solution

  Modify user attributes using the OpenSSO server interface rather than the Web Space Server My Account portlet.