Triggering Reset Password Task in Bulk

[GC]

Hi

We have a requirement where IT helpdesk has to trigger password change task manually for bulk users.

What are the possible approaches to fulfill this requirement apart from the CSV upload and update one customproperty of user and trigger task through update rules. Through analytics, is it possible? Or any other way with less amount of manual work for IT helpdesk team.  

[pmahalle]

Hi @GC ,

For which connector you want to trigger the change password tasks?

[GC]

Hi Paddy,

This is for the REST connector.

[rushikeshvartak]

If you have configured jsons then you can go thru analytics or user update rule

[GC]

Hi Rushikesh,

How we can do that through Analytics?

[rushikeshvartak]

https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter16-SSM-Analytics/Managing-An...

Password Expired

When Password Expired is configured as an allowed action, it expires user’s password on the configured date. You can manually set or schedule the password expiry. This action can be configured as a default action. This action does not create any tasks, instead it marks the password to be expired for the selected users.

The Analytics query must have the columns given below:
userKey - Stores the userkey of the user whose password has to be expired.

Sample query:

• Manual action (bulk/single row action)

  SQL

  select u.userkey, u.username , u.LASTPASSWORDUPDATEDATE, date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day) as 'Expiry Date' from users u, policyrule p

  where u.PASSWORDEXPIRED=0
  and p.SCOPE='USER'
  and p.EXPIREAFTER > 0
  and DATEDIFF(date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day),sysdate()) = 0;

• Schedule from Run All V2 Analytics Job

  SQL

  select u.userkey, u.username , u.LASTPASSWORDUPDATEDATE, date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day) as 'Expiry Date', 'passwordExpired' as 'Default_Action_For_Analytics' from users u, policyrule p

  where u.PASSWORDEXPIRED=0
  and p.SCOPE='USER'and p.EXPIREAFTER > 0
  and DATEDIFF(date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day),sysdate()) = 0;

• Schedule from Run All V1 Analytics Job

  SQL

  select u.userkey, u.username , u.LASTPASSWORDUPDATEDATE, date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day) as 'Expiry Date', 'Password Expired' as 'Default_Action_For_Analytics' from users u, policyrule p

  where u.PASSWORDEXPIRED=0
  and p.SCOPE='USER'and p.EXPIREAFTER > 0
  and DATEDIFF(date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day),sysdate()) = 0;

[GC]

Hi Rushikesh,

Thanks for the steps, however the requirement is for to trigger the change password task for bulk accounts. 

[rushikeshvartak]

Then create Update Account task and in Update account json call change password API.

[pmahalle]

Hi @GC ,

You want to perform it as an one-time activity or it will be a daily activity for help desk?

If it's daily activity then you can write custom jar job and use change password API {{url}}/ECM/{{path}}/changePassword. Ask help desk team to execute the job as required by providing the list of users whose password needs to be reset, as an input to the job. 

Refer :

https://documenter.getpostman.com/view/1797923/RWaLwo21#f3cb3aa9-05f8-4a8b-8ad7-e80b8e64aa94

[GC]

Thanks! Paddy. Looking for the options with-in Saviynt. Custom Jar will always be the last option for us.  😊