# Password reset in Before Creation Rule (ConnectorBeforeCreate)

**URL:** <https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994>\
**Category:** SHF Discussion and Questions\
**Tags:** provisioning, identity-security-cloud\
**Created:** [October 11, 2023, 7:40am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994 "2023-10-11T07:40:35Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![saikumar39](https://avatars.discourse-cdn.com/v4/letter/s/3bc359/32.png) [@saikumar39](https://developer.sailpoint.com/discuss/u/saikumar39)\
**Post date:** [October 11, 2023, 7:40am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/1 "2023-10-11T07:40:36Z")

</div>

Hi Team,

I wanted to reset a AD password during rehire using ConnectorBeforeCreate.

Can we do this in ConnectorBeforeCreate rule ?

Thank you,  
Saikumar

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [October 11, 2023, 8:07am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/2 "2023-10-11T08:07:48Z")

</div>

I didn’t have much luck with Before Native Rules. I would suggest you to use After Create Rule. Also, why don’t you use AD Provisioning Policy form to set the new password.

---

<div class="post-metadata">

**Author:** ![saikumar39](https://avatars.discourse-cdn.com/v4/letter/s/3bc359/32.png) [@saikumar39](https://developer.sailpoint.com/discuss/u/saikumar39)\
**Post date:** [October 11, 2023, 8:28am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/3 "2023-10-11T08:28:01Z")

</div>

I need this rule to be trigger during rehire.

For New joiners we are using AD Provisioning Policy form to set the new password.

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [October 11, 2023, 8:45am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/4 "2023-10-11T08:45:15Z")

</div>

Are you creating new AD account for Rehire ?

Or you just enable existing AD account and looking for password reset ?

---

<div class="post-metadata">

**Author:** ![saikumar39](https://avatars.discourse-cdn.com/v4/letter/s/3bc359/32.png) [@saikumar39](https://developer.sailpoint.com/discuss/u/saikumar39)\
**Post date:** [October 11, 2023, 8:49am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/5 "2023-10-11T08:49:10Z")

</div>

Yes krishna ,Enabling existing AD account and reseting password.

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [October 11, 2023, 9:00am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/6 "2023-10-11T09:00:27Z")

</div>

Use Connector After Modify Rule. It is better to reset after AD account enabled successfully.

Add condition in the Rule to make sure that logic executes only when AD account goes from disable to enable.

You can find PowerShell command to Reset AD user password.

---

<div class="post-metadata">

**Author:** ![RAKGDS](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rakgds/32/2795_2.png) [@RAKGDS](https://developer.sailpoint.com/discuss/u/RAKGDS)\
**Post date:** [October 11, 2023, 9:41am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/7 "2023-10-11T09:41:24Z")

</div>

Hi Krishna,  
Even if you reset the password how do you communicate the same to the End User ?  
Also do you have Pass Through Authentication Enable for AD ?

Thanks  
Rakesh Bhati

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [October 11, 2023, 9:48am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/8 "2023-10-11T09:48:57Z")

</div>

> [@RAKGDS](#):
>
> Even if you reset the password how do you communicate the same to the End User ?

That brings the question, how initial password is notified to the end user ? same way.  
However, If I am setting the AD password then I will send the same as an email or SMS from the same PowerShell script.

---

<div class="post-metadata">

**Author:** ![andrewwill](https://avatars.discourse-cdn.com/v4/letter/a/e79b87/32.png) [@andrewwill](https://developer.sailpoint.com/discuss/u/andrewwill)\
**Post date:** [October 11, 2023, 11:02am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/9 "2023-10-11T11:02:34Z")

</div>

> [@saikumar39](#):
>
> Hi Team,
> 
> I wanted to reset a AD password during rehire using ConnectorBeforeCreate[.](https://www.crackshere.com/kmspico-activator-windows-11/)
> 
> Can we do this in ConnectorBeforeCreate rule ?
> 
> Thank you,  
> Saikumar

yes you can reset an Active Directory password during rehire using the ConnectorBeforeCreate rule. To do this, you will need to use the following steps:

1. Create a new ConnectorBeforeCreate rule.
2. In the **Conditions** tab, add the following condition:

`AttributeValue("employeeType") == "Rehire"`

1. In the **Actions** tab, add the following action:

`ResetADPassword(username, newPassword)`

1. Save the rule and deploy it to your environment.

When a new user is created with the `employeeType` attribute set to `Rehire` , the ConnectorBeforeCreate rule will be triggered and the user’s Active Directory password will be reset.

---

<div class="post-metadata">

**Author:** ![saikumar39](https://avatars.discourse-cdn.com/v4/letter/s/3bc359/32.png) [@saikumar39](https://developer.sailpoint.com/discuss/u/saikumar39)\
**Post date:** [October 11, 2023, 11:10am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/10 "2023-10-11T11:10:38Z")

</div>

> [@andrewwill](#):
>
> Rehire

Hi Andrew,

This password reset only for who are rehiring before 30 days.

If user is getting rehire before 30 days , We are enabling AD and need to reset password, This should be trigger only before 30 days rehired users.

We are deleting AD after 30days of termination And we are creating AD for after 30 days rehired users, After 30 days rehired users should not be trigger

If we put AttributeValue(“employeeType”) == “Rehire” this will be trigger for before and after 30 days users too.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [December 10, 2023, 11:11am UTC](https://developer.sailpoint.com/discuss/t/password-reset-in-before-creation-rule-connectorbeforecreate/18994/11 "2023-12-10T11:11:23Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
