Active Directory account password generation and communicate to the User or Manager

Hi All,
We have a requirement to set the AD password and share it with the manager via email.
One approach is to use a PowerShell script deployed on IQService to send the email notification.
Kindly let us know if there is any feasible way to implement this requirement.

Hello @balaji,

That would be the only possible approach. SailPoint does not provide a way to send passwords via email. When SailPoint provisions an Active Directory account, the password is encrypted, and there is no mechanism to decrypt and retrieve it later.

Additionally, sending passwords through email, even using PowerShell scripts, poses a security risk and is generally not recommended. However, if the client is aware of and accepts the associated risks, an alternative process could be discussed outside of SailPoint’s standard functionality like reaching out to help desk to get their password

Hi @JackSparrow
Thanks for Conforming this :slightly_smiling_face:.