Policy Xpress Password Generation: Resolving 'PasswordMessageType::Reuse Arguments' during ModifyUserEvent

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When utilizing a Policy Xpress (PX) policy to generate passwords via the CA random number generator, the ModifyUserEvent may fail.

This typically manifests when the system incorrectly identifies the generated password as a duplicate or recently used value.

Environment

Identity Manager 14.x & v15

Cause

This failure is caused by a timing conflict within the task and event processing model. When the PX policy is triggered, the validation logic for password reuse executes before the new value is fully committed, leading to a false-positive 'Reuse' message.

This is common when policies are configured to run at the 'Event' level instead of the 'Task' or 'UI' level.

Resolution

To resolve the 'PasswordMessageType::Reuse Arguments' error, adjust the invocation timing of the Policy Xpress policy.

1. Log in to the Identity Manager User Console.
2. Navigate to Policies > Policy Xpress.
3. Open the specific policy responsible for password generation.
4. Modify the Policy Category to run against the UI (User Interface) instead of the Event level.
   • Setting the category to 'UI' ensures the password is generated and validated during the submission phase rather than during back-end event processing.
     
5. Save the policy changes and test the ModifyUserEvent again to verify the error is cleared.