Password Sharing upon new account creation

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

We have some accounts on Azure which are not linked to the on prem AD. We want to create a source for such accounts in the identity now and use it for provisioning. The challenge here is how do i share the password to the end user whose account has been created. What can i explore for self service password reset?? What your thoughts on this?

I do see the option 3 from the documentation promising. Does any one know more about these?

https://community.sailpoint.com/t5/IdentityNow-Articles/Best-Practices-for-Provisioning-with-Passwords-in-IdentityNow/ta-p/75459#:~:text=Option%203%20-%20Dynamic%20’Unknown’%20Password%20and%20Password%20Reset

2

Hi @vikramsah,

What we did for the same use case was creating the account with an unknown password (the most secure option) using the password generator on the Create profile. Then we updated the new account creation email to guide the users to use the IDN password manager to change their newly created account password.

3

Hi @vikramsah,

You can make use of the Generator option for the password field and select the “Create Password” rule.

This would generate and assign a password based on the password policy that is assigned to your source or the default password policy in your tenant.

image
image1174Ă—310 14.8 KB

You can make use of the Azure SSPR options for the end user to perform the password reset in-case you plan to use the Azure feature

Take a look at the below docs

1 Like
4

Ty Mehdi. Where do you configure the new account creation email??

5

The email templates is called “new account provisioned” here is the link for more details : New Account Provisioned Email Template - SailPoint Identity Services
Also, note that you need to update the connector attributes to enable this email to be sent using the following API call update-source | SailPoint Developer Community. An example of the body to enable the email is listed in the request examples.

1 Like
6

And where exactly do we create this email template itself? Doesnt look like we add it to the payload for the update source api .

7

Hi @vikramsah the email template is available on the tenant already through Admin → Global → Email Templates → New Account Provisioned. You can then customize the email to add your branding and include the details around password reset.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.