Password Changes on Active Directory

Passwords modified on Active Directory are propagated through the Identity Managerand Identity Synchronization for Windows deployment as described here.

1. The user resets the password on Active Directory by using the Change Password option in the Task Manager dialog box of Windows.

2. Identity Synchronization for Windows detects the change and sets a password invalid flag on the corresponding user entry in the Identity Synchronization for Windows-managed Directory Server.

3. The user connects to Directory Server for the password change to be complete (see Using On-Demand Password Synchronization to Obtain Clear-Text Passwords in Sun Java System Directory Server Enterprise Edition 6.0 Installation Guide in Sun Java System Directory Server Enterprise Edition 6.0 Installation Guide).

4. Identity Manager’s pwsync DLL also detects the password change and propagates it to all other Identity Manager-managed resources, except Directory Servers.