Active Directory password creation and password changes

[aundreb]

Hello,

Is it possible when generating a password for an Active Directory account to send that password to the user's manager or someone else? Similar for password changes, is there a way for users to do a self service password reset for their AD account and/or have a Help desk role manage AD accounts for account unlocks,resets, etc?

[rushikeshvartak · Accepted solution]

• Yes it is possible when generating a password for an Active Directory account to send that password to the user's manager or someone else. You need to update password template TO CC accordingly 
• Similar for password changes, is there a way for users to do a self service password reset for their AD account Yes User change change password from saviynt from change password or you can use change password utility of saviynt
• and/or have a Help desk role manage AD accounts for account unlocks,resets, etc Yes you can assign access to help desk using request for others they can do unlock lock

Password Utility- https://saviynt.freshdesk.com/support/solutions/articles/43000580937-configuring-password-synchroniz... 

Change password https://saviynt.freshdesk.com/support/solutions/articles/43000580934-changing-or-resetting-passwords

FAQ  https://saviynt.freshdesk.com/support/solutions/articles/43000606123-password-management-and-step-up...

[aundreb]

Hi @rushikeshvartak , are you referring to an email template? If so is there a template of it anywhere, and is there a variable that can be used to capture the generated password in the email?

[rushikeshvartak]

Email Template is attached in Global Configuration for same

Under Tasks - Task Complete Email Template For New Account Password

Specify the email template to be used when a new account is created with password

Email Template :

Your access has been requested to the following application:

• Application Name: ${task.endpoint.endpointname}
• Request ID: ${requestid}

You can login to the application using the below password:
Password: ${account_password} You may view more information about this request in the Request History section in the

if you need additional variables use below code in email body & use it 

${this.binding.variables.each {k,v -> println "$k = $v" + "<" + "br" + ">"}}