How does strong synchronization of an endpoint account impact password propagation in Identity Manager
search cancel

How does strong synchronization of an endpoint account impact password propagation in Identity Manager

book

Article ID: 44571

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

If an endpoint account template has a password mapping in place and strong synchronization enabled, does the endpoint account password get updated when the global user's password is changed?

Environment

Release: CAIDMB99000-12.6.8-Identity Manager-B to B
Component:

Resolution

The %P% rulestring in an Account Template is only utilized during the initial account creation. When a provisioning global user password change takes place that new password will propagate to the associated endpoint accounts, assuming you choose to sync with accounts and assuming that the endpoint does not have password propagation disabled. This propagation will always occur regardless of strong or weak sync and even if there is no account template in place. Password and Status are the two fields that will propagate even without a template.