Setup Advanced Password Services in Siteminder (APS) to send email for Expired Password?

Products

• SITEMINDER

Issue/Introduction

This KB highlights the steps to enable email notifications upon user Authentication event with Expired password.

Environment

Component: SMPLC : SITEMINDER -POLICY SERVER
Version: Applicable to all the supported releases

Resolution

APS can be configured to send an email, including a password change URL, to a user whose password has expired.

To get this working, the following needs to be done:

** 1) Change the APS.cfg to have the following 

NOTE --> Change the path in the below to match the environment.

define NO_MAIL 
;;define NO_MAIL
define SMTP_SERVER     <This should be your mail server>
define MAIL_LOG             /<siteminder_path>/siteminder/log/APSMail.Log
define MAIL_PATH           /<siteminder_path>/siteminder/bin/Mail

///////////////////////////////////////////////////////////////////////

//<NO_MAIL>Server=<SMTP_SERVER>
Server=<SMTP_SERVER>
Login=<email of the admin account the emails will be sent from>   example [email protected]

///////////////////////////////////////////////////////////////////////
// The name of a log file where ALL mail will be logged (even if a mail
// server is not specified). Useful for debugging. 
//
// The information logged includes any status codes returned by the
// mail server.
///////////////////////////////////////////////////////////////////////

Log Path=<MAIL_LOG>

///////////////////////////////////////////////////////////////////////
// The Directory setting is similar to the PATH environment variable;
// it can contain one or more directories on which mail files can 
// reside. Directories will have attribute translation performed on 
// them. Multiple directories are separated by semicolons on Windows, 
// colons on Unix.
//
// This setting can support overrides. This is useful when multiple
// sets of email files exist and different ones should be used, 
// depending on user properties.
///////////////////////////////////////////////////////////////////////

Directory=<MAIL_PATH>

** 2) Go to /<siteminder_path>/siteminder/bin/Mail and backup the ExpiredPassword.email

** 3) Edit the ExpiredPassword.email and make sure have the following:

[TO] {mail}
[FROM] <email of the admin account the emails will be sent from>    example [email protected]
[SUBJECT] Your password has expired.

Dear {Name},

Your password has expired.
Please use the link below to reset your Password

http://<yourdmoainhere>/SmCPW/SmCPW.exe

Regards

** 4) Restart the Policy Server and test the use case.

** 5) Check the /<siteminder_path>/siteminder/log/APSMail.Log and should see something like this 

=======================================================================
Date: Thu, 26 Sep 24 18:35:55 GMT
From: [email protected]
Sender: [email protected]
Subject: Your password has expired.
To: Users_email that will be pulled from the mail attribute 
X-Mailer: <CA APS Mailer V12.8.0801.3003cv12.8.0801.3003>
MIME-Version: 1.0
-----------------------------------------------------------------------
Dear VDAAAA,

Your password has expired.
Please use the link below to reset your Password

http://yourdmoainhere/SmCPW/SmCPW.exe