To Generate user password and send email

[Anshu_07]

We have a requirement to automatically change a user's password to a randomly generated one upon onboarding. This new password should also update their Active Directory password and be sent to the user via email.

[rushikeshvartak]

You can call change password action from rule

[Anshu_07]

You mean User  update rule? will it generate a random password ? and how do we send email to the users

[NM]

@Anshu_07 in endpoint email template set change password attach email template which will send to respective user.

[Anshu_07]

Hi , In endpoint there is  no option to attach email. Could you please provide any screenshot where specially I can attach the template

[rushikeshvartak]

• User vs endpoint has no relation so discard that

[Anshu_07]

Ok in that case how end users will receive the password via email?

[rushikeshvartak]

Refer https://forums.saviynt.com/t5/identity-governance/random-password-generation-for-new-user-onboard-an...

[Anshu_07]

Thank you , I could see we can attach for new account creation. Could you please tell how do I attach template for specific task type ?

[rushikeshvartak]

• This is when you want to change password of account , you need to attach under endpoint - email templates

[rushikeshvartak]

You can generate random from connection

[Anshu_07]

Random password is getting generated and but task is getting completed with an error "Error while change password operation for account-fc1502dev in AD - [LDAP: error code 53 - 0000052D: SvcErr: DSID-031A126C, problem 5003 (WILL_NOT_PERFORM), data 0 ]"

[rushikeshvartak]

Here are some common causes and solutions:

1. Insufficient Permissions: Ensure that the user account performing the operation has the necessary permissions for the requested action.

2. Password Policy Violations: If the operation involves user account modifications (like password changes), check if it violates any password policies (e.g., complexity, history).

3. Account Restrictions: The account you’re trying to modify or access might be disabled or restricted. Make sure the account is enabled and meets any necessary conditions.

4. LDAP Schema Constraints: Check for any schema constraints that might prevent the operation. This can include things like required attributes not being provided.

5. Domain Controller Issues: If you're working in a multi-domain environment, ensure that the domain controller you're connecting to is functioning properly and is up-to-date.