Tech Tip : CA Single Sign-On : AD Old Password Still Accepted

Discussion created by Patrick-Dussault Employee on Jan 2, 2017



We have recently implemented a change password mechanism using smpwservices.fcc for a new application. It is working as expected and if I logoff and logon with new credentials everything seem to work fine.


The problem is that (for a certain period of time) I'm able to login with old credentials too. Why is this possible? Is it a caching issue? How can I force Siteminder to accept only the new credentials?



This is expected as AD will keep old password valid for some time:



Product is working as designed.


Delay is in 'new password' propagation in AD infrastructure


KB : TEC1080524