Password expire cases

[bala]

Hi Team,

We have SSO configured and we have a redirect to custom java application for password self service portal to reset the password, which will reset the password of all application owned by user(Primary, secondary etc). 

Now the question,  can we set PASSWORDEXPIRED(user table) to true based on target system password expire. 

Say for example 1 application has 180 days expire and another application has 90 days password expire.  If user doesn't reset the password.  when user login to Saviynt, user should be automatically redirect to self service portal to set his new password as one of his application password  got expired.  

We are not storing any password in Saviynt and client doesn't want to store any password in IGA. Now can we set some attribute to force redirect directly during passwordexpired cases. If yes, please provide more details to achieve it. Thanks. 

[rushikeshvartak]

You can store Password Expiry date on account customproperty and show on Application Modify request form using dynamic attribute

[bala]

Thanks for the response @rushikeshvartak. How to forcefully redirect the user to password reset custom page? We have SSO as I told and it has a button where user needs to manually click it to redirect user to custom java application for password self service portal. 

We need to force user to do reset password and not allow him to login to Saviynt, since one of his application password has expired.

We are not storing any password in Saviynt and client doesn't want to store any password in IGA. 

[bala]

Does Expire after days in password policy do some thing when we define on Policy Scope as Application level? What is the use of this? What fields will be updated when we set it for some account level password policy scopes?     

[rushikeshvartak]

You can add hyperlink using dynamic attribute