Help with forcing user's password to change after self registration (Legacy_Onyx KB Id: 164695)
search cancel

Help with forcing user's password to change after self registration (Legacy_Onyx KB Id: 164695)

book

Article ID: 54875

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

You are trying to ensure that users who self-register to the system are forced to change their password at next logon.

You have tired doing all of the following but it doesn't work:

1) In the toPhysical() method of an LAH, set %ENABLED_STATE% to 0x01000000
2) In the toPhysical() method of an LAH, set %ENABLED_STATE% to 16777216
3) Modified the Self Reg task to set the ForcePasswordChange field to a default value of 1 (type checkbox)
4) Modified the Self Reg task to set the ForcePasswordChange field to a default value of 1 (type hidden)
5) Modified the Self Reg task to set the Disabled State field to a default value of 16777216

Environment

Release:
Component: IDMIND

Resolution

Any of the following will resolve this issue:

- set the default value of the ForcePasswordChange field on the task screen to the word "true" (obviously this will affect every user)
- POST a TEWS request with the attribute "|forcePasswordReset|" and value "true"
- ensure that an LAH that sets the value of the %ENABLED_STATE% attribute in the toPhysical() method is the last LAH in the LAH execution order for the IME (IDM's built-in LAH's override the value thus set otherwise)