How to use Policy Xpress to set random user passwords during a bulk upload - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

Generating random passwords for users during bulk creation or modification tasks is a common requirement in Identity Manager. This article explains how to configure a Policy Xpress (PX) policy to automatically generate and assign random passwords to users processed via the Bulk Loader task or Bulk Load Client.

Environment

Identity Manager 14.5

Cause

Bulk Loader tasks may require user passwords to be generated dynamically for security compliance. Without a PX policy, the Bulk Loader expects these values to be provided in the input file. Configuring a PX policy of type UI ensures the generated password is captured at the global scope during the task execution.

Resolution

1. Create a PX policy of type UI. This configuration is required to ensure the password value is captured during the task process.
2. In the Events tab, configure the policy to trigger on Set subject for the relevant event (e.g., "Reset User Password"). This ensures the values are correctly set upon task submission.
3. Add a Data element to generate an 8-character random string. Set the following properties:
   • Category: General
   • Type: Random Value Generator
   • Function: Random String
   • Length: Set as required.
4. Add an Action Rule that maps the value of the Data element to userPassword and |passwordConfirm| in the policy action.
5. Exclude the userPassword and |passwordConfirm| attributes from your input file. The PX policy will handle populating these attributes automatically during the upload.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.