Symantec IGA

Hello Guys,

This might be a silly question but i really want to understand how CA IDM does the password reset process on AD. What are the steps IDM perform to go to the AD and change a password.?

Thanks in advance .

Regards,

Hi,

CA Identity Manager do by a task or policy xpress the update of corporate user and propagate to MS AD by Provisioning Server layer connected by SSL certificate+password.

Please, see this link from docops about the "Acquire an Active Directory Endpoint" that has more information.

Guess this helps

Hello Jean

You can change the password directly to the account on the endpoint "AD" or by synchronization, for example invoking task "Password Reset".

Either way, at final you will need a secure connection "SSL" with AD and a service account possessing privileges to reset the password.

Any curiosity or need to know something deeper, do not stop asking. What seems simple is not silly.

Efrén

You may find this document of use.    I traced the data flows for the userPassword from AD to IM and IM to endpoints.

Lifecycle of the userPassword in CA Identity Manager & Use of Jmeter for scalability testing

Cheers,

A.