07/14/2023 07:14 AM
Hi
We have a requirement where IT helpdesk has to trigger password change task manually for bulk users.
What are the possible approaches to fulfill this requirement apart from the CSV upload and update one customproperty of user and trigger task through update rules. Through analytics, is it possible? Or any other way with less amount of manual work for IT helpdesk team.
07/14/2023 07:16 PM
Hi @GC ,
For which connector you want to trigger the change password tasks?
07/16/2023 09:11 PM
Hi Paddy,
This is for the REST connector.
07/16/2023 09:51 PM
If you have configured jsons then you can go thru analytics or user update rule
07/16/2023 11:56 PM
Hi Rushikesh,
How we can do that through Analytics?
07/17/2023 08:52 PM
When Password Expired is configured as an allowed action, it expires user’s password on the configured date. You can manually set or schedule the password expiry. This action can be configured as a default action. This action does not create any tasks, instead it marks the password to be expired for the selected users.
The Analytics query must have the columns given below:
userKey - Stores the userkey of the user whose password has to be expired.
Sample query:
Manual action (bulk/single row action)
select u.userkey, u.username , u.LASTPASSWORDUPDATEDATE, date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day) as 'Expiry Date' from users u, policyrule p
where u.PASSWORDEXPIRED=0
and p.SCOPE='USER'
and p.EXPIREAFTER > 0
and DATEDIFF(date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day),sysdate()) = 0;
Schedule from Run All V2 Analytics Job
select u.userkey, u.username , u.LASTPASSWORDUPDATEDATE, date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day) as 'Expiry Date', 'passwordExpired' as 'Default_Action_For_Analytics' from users u, policyrule p
where u.PASSWORDEXPIRED=0
and p.SCOPE='USER'and p.EXPIREAFTER > 0
and DATEDIFF(date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day),sysdate()) = 0;
Schedule from Run All V1 Analytics Job
select u.userkey, u.username , u.LASTPASSWORDUPDATEDATE, date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day) as 'Expiry Date', 'Password Expired' as 'Default_Action_For_Analytics' from users u, policyrule p
where u.PASSWORDEXPIRED=0
and p.SCOPE='USER'and p.EXPIREAFTER > 0
and DATEDIFF(date_add(u.LASTPASSWORDUPDATEDATE,Interval p.expireafter day),sysdate()) = 0;
07/17/2023 09:14 PM
Hi Rushikesh,
Thanks for the steps, however the requirement is for to trigger the change password task for bulk accounts.
07/17/2023 09:23 PM - edited 07/17/2023 09:23 PM
Then create Update Account task and in Update account json call change password API.
07/16/2023 10:36 PM
Hi @GC ,
You want to perform it as an one-time activity or it will be a daily activity for help desk?
If it's daily activity then you can write custom jar job and use change password API {{url}}/ECM/{{path}}/changePassword. Ask help desk team to execute the job as required by providing the list of users whose password needs to be reset, as an input to the job.
Refer :
https://documenter.getpostman.com/view/1797923/RWaLwo21#f3cb3aa9-05f8-4a8b-8ad7-e80b8e64aa94
07/17/2023 07:13 AM
Thanks! Paddy. Looking for the options with-in Saviynt. Custom Jar will always be the last option for us. 😊