Unable to login to AD after Change Password is performed on AD Account

[Harish_Yara]

Hi Team,

We have changed password for user AD account using Change Password task and captured that password from email template from Saviynt, after changing the pwd tried to login with the changed password but it is not working (Giving password incorrect).  

Note: We have created custom password policy(matching with AD password policy) and configured at Security System level.

Is there anything that we need to validate from Saviynt end to fix this issue? 

@rushikeshvartak 

Thanks,

Harish

[rushikeshvartak]

Did you configured that after password changed user need to change password on first time login?

[Harish_Yara]

No in AD user need to change password on first time login is not checked. still getting incorrect pwd.

@rushikeshvartak 

[rushikeshvartak]

share JSON

[Harish_Yara]

Hi @rushikeshvartak ,

I changed AD account password with LDAP code and password is changed, also able to login with that password to office account, then i tried with Saviynt by triggering Change Password task, password change is not happening for that AD account is there any config that needs to be added before firing Change Password Task?

Thanks,

Harish

[rushikeshvartak]

I need json for same

[Harish_Yara]

HI @rushikeshvartak , We tried with pwdLastset=-1 and pwdLastset=0 in CREATEACCOUNTJSON bothways. I am able to login with Initial password that Saviynt generates after AD account creation and but the business requirement is to send the AD account credentials at the end of joiner process in order to achieve this we have created password policy and configured this pwd policy at security system level  and triggering Change Password task using update rule, but the Change Password functionality is not working (password is not changed for AD account). 

Thanks,

Harish

[rushikeshvartak]

How change password task is created ?

[Harish_Yara]

In user update rule I configured Change Password task for required Endpoint @rushikeshvartak

[rushikeshvartak]

what is source column in arstasks

https://documenter.getpostman.com/view/1797923/2s83mbojGM#7222367a-39d1-472b-8839-d63b00e31c7d

[Harish_Yara]

@rushikeshvartak  - Sorry I couldn't catch you. Can you please repeat the question again?

[Harish_Yara]

@rushikeshvartak  - source value for Change Password task in ars table is - "PROVRULE"