Password reset in Before Creation Rule (ConnectorBeforeCreate)

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi Team,

I wanted to reset a AD password during rehire using ConnectorBeforeCreate.

Can we do this in ConnectorBeforeCreate rule ?

Thank you,
Saikumar

2

I didn’t have much luck with Before Native Rules. I would suggest you to use After Create Rule. Also, why don’t you use AD Provisioning Policy form to set the new password.

3

I need this rule to be trigger during rehire.

For New joiners we are using AD Provisioning Policy form to set the new password.

4

Are you creating new AD account for Rehire ?

Or you just enable existing AD account and looking for password reset ?

5

Yes krishna ,Enabling existing AD account and reseting password.

6

Use Connector After Modify Rule. It is better to reset after AD account enabled successfully.

Add condition in the Rule to make sure that logic executes only when AD account goes from disable to enable.

You can find PowerShell command to Reset AD user password.

1 Like
7

Hi Krishna,
Even if you reset the password how do you communicate the same to the End User ?
Also do you have Pass Through Authentication Enable for AD ?

Thanks
Rakesh Bhati

8

That brings the question, how initial password is notified to the end user ? same way.
However, If I am setting the AD password then I will send the same as an email or SMS from the same PowerShell script.

1 Like
9

yes you can reset an Active Directory password during rehire using the ConnectorBeforeCreate rule. To do this, you will need to use the following steps:

  1. Create a new ConnectorBeforeCreate rule.
  2. In the Conditions tab, add the following condition:

AttributeValue("employeeType") == "Rehire"

  1. In the Actions tab, add the following action:

ResetADPassword(username, newPassword)

  1. Save the rule and deploy it to your environment.

When a new user is created with the employeeType attribute set to Rehire , the ConnectorBeforeCreate rule will be triggered and the user’s Active Directory password will be reset.

10

Hi Andrew,

This password reset only for who are rehiring before 30 days.

If user is getting rehire before 30 days , We are enabling AD and need to reset password, This should be trigger only before 30 days rehired users.

We are deleting AD after 30days of termination And we are creating AD for after 30 days rehired users, After 30 days rehired users should not be trigger

If we put AttributeValue(“employeeType”) == “Rehire” this will be trigger for before and after 30 days users too.

11

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.