Description:

Make sure to define the following properties: ClearPwdIfInvalid=true and PwdConfirmAttrName=|passwordConfirm|.

Solution:

You might have noticed that tasks that allow to reset passwords might show the New Password attribute already set with a number of asterisk characters.

This could be confusing to the users who would prefer to see it empty.

To fix this you should add parameter: ClearPwdIfInvalid=true and PwdConfirmAttrName=|passwordConfirm| to the BlthPasswordServices in the Management Console.

The entire procedure is described below:

Enable Clear Password Fields on Reset User Password Task
You can configure CA Identity Manager to automatically clear password fields when a previously entered value violates a password policy, or when values in the Password and Confirm Password fields do not match.

Follow these steps:

1. Start the Management Console.
2. Select the environment that you want to manage, then click Advanced Settings. The Advanced Settings page appears.
3. Click Business Logic Task Handlers, BlthPasswordServices. The Business Logic Handler Properties page appears.
4. Create the following properties:
   ClearPwdIfInvalid=true
   PwdConfirmAttrName=|passwordConfirm|
5. Verify that ConfirmPasswordHandler settings are as follows:
   Object type User
   Class ConfirmPasswordHandler
   ConfirmationAttributeName = |passwordConfirm|
   OldPasswordAttributeName = |oldPassword|
   passwordAttributeName = %PASSWORD%

Users can now clear password fields in the Reset User Password task.

Release:
Component: IDMGR