Password Generation

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,
I have a requirement that, to generate password while account creation and send email to user.
I tried using “create password” generator while provisioning.

image
image750×205 4.65 KB

How can i track this password and send email to user?

is there any alternative to generate password and share to user.
pls suggest

2

Unfortunately, there is no way to do this natively in the system.

Sailpoint offers 3 methods to generate passwords for new creates:

1 - Static Password
2 - Dynamic ’Known’ Password
3 - Dynamic ’Unknown’ Password and Password Reset

You can read about these options here:

https://community.sailpoint.com/t5/IdentityNow-Articles/Best-Practices-for-Provisioning-with-Passwords-in-IdentityNow/ta-p/75459

You can use an after provisioning rule to kick off a PowerShell script that will change the password to something the script knows and have the script send the password as an alternative.

3

Hi @nidhipriya

Password is a sensitive information .
Sailpoint encrypts all the password data . We cannot send a plain password in sailpoint at any point of time .
Alternative is to genarate a Dynamic Known Password and send an email of the pattern used in here , or a Static Known Password will be same for everyone .
Both dynamic known and static are less secured as they are “Known”

Thanks
Sid

4

If the source is Active Directory, then there is some additional PowerShell scripting that can be included in the “After Create” logic that can be used. Basically:

  • Create/Set a new password for the account (ignore what SailPoint did by default).
  • Send this password via email to the manager, HR, etc. as needed (but you can’t send it to the user because they need this password to log in which will have you in a catch-22 scenario).

Still not a recommended best practice by any stretch, but if that’s the requirement and you have to do it you don’t much choice.