Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Not working for changing password on Azure AD account

JPMac
Regular Contributor
Regular Contributor

We want to change the password of our Azure AD account.
SecuritySystem is set as follows.

JPMac_0-1709647114072.png

"ChangePassJSON" in "AzureAD _ Couple" set to "Password Management Connection" is as follows.

===

{
  "call": [
    {
      "name": "call1",
      "connection": "userAuth",
      "httpMethod": "PATCH",
      "httpParams": "{\"passwordPolicies\" :\"TestPWDPolicy\",\"passwordProfile\" : {\"password\":\"${password}\",\"forceChangePasswordNextSignIn\": false}}",
      "httpHeaders": {
        "Authorization": "${access_token}"
      },
      "httpContentType": "application/json",
      "successResponses": {
        "statusCode": [
          200,
          201,
          204,
          205
        ]
      }
    }
  ]
}
===

In this state, reset the Azure AD account from "Reset Account Password."
This creates a task like this, but when I run the provisioning job, it doesn't respond.

JPMac_2-1709647275474.png

In the first place, is this recognition that the password I reset with "Reset Account Password" is reset in line with ChangePassJSON wrong?

 

By the way, I tried the follow changepassjson, but it's not working too.

{
  "call": [
    {
      "name": "call1",
      "connection": "userAuth",
      "httpMethod": "PATCH",
      "httpParams": "{\"passwordPolicies\" :\"TestPWDPolicy\",\"passwordProfile\" : {\"password\":\"${requestAccessAttributes?.savpassword==null? password : requestAccessAttributes.savpassword}\",\"forceChangePasswordNextSignIn\": false}}",
      "httpHeaders": {
        "Authorization": "${access_token}"
      },
      "httpContentType": "application/json",
      "successResponses": {
        "statusCode": [
          200,
          201,
          204,
          205
        ]
      }
    }
  ]
}
1 REPLY 1

Dhruv_S
Saviynt Employee
Saviynt Employee

Hi @JPMac 

Please use the below JSON and update the name of the connection (mentioned in bold below) exactly as the name of the connection used in the connectionJSON. 

{
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://graph.microsoft.com/v1.0/users/${account.accountID}",
"httpMethod": "PATCH",
"httpParams": "{\"passwordProfile\":{\"password\":\"${arsTasks.getPassword()}\",\"forceChangePasswordNextSignIn\":\"false\"}}",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
201,
200,
204
]
}
}
]
}

Regards,

Dhruv Sharma