Hi All, I’m trying to set pwdLastSet to true in the provisioning policy for Active Directory. After adding the value in the provisioning policy, I submitted a create request for a user. Then I ran aggregation and Perform Identity Request Maintenance. In the Provisioning Engine, all attributes show…

Hi @bobbysrik pwdlastset has a date time stamp syntax, not a Boolean. What are you trying to achieve with setting it to true?

Hi @bobbysrik , pwdLastSet attribute contains the date time stamp for when the last time password was set successfully. you can set it to today’s date since you are creating a password on the current date.

Hi Jeremy. Thanks for the reply. So, setting this to true will enable the users to change the password at next log in.

Hi @j_place When set to zero, the identity cube displays a date value for the attribute, and the request fails to complete successfully. When set to true, the cube shows a zero value for the attribute, but the request still does not complete successfully.

Hi @bobbysrik based on my understanding and knowledge pwdLastSet in AD is a timestamp with special values (0 = force change at next logon, -1 = let AD set “now”)… In IIQ AD connector you should treat it as a Boolean flag in your provisioning policy “pwdLastSet as static value to be true” to force “…

pwdLastSet attribute in Active Directory

IdentityIQ (IIQ) IIQ Discussion and Questions

j_place (Jeremy Place) November 24, 2025, 4:13pm 5

Hi @bobbysrik You need to set it to 0 (zero) for the user to be forced to change password

Topic		Replies	Views
Why PwdlastSet attribute in Active directory is set to "false" ISC Discussion and Questions identity-security-cloud , provisioning , connectors	7	861	August 25, 2024
Account Request stuck at Pending state even after Provisioning IIQ Discussion and Questions identityiq , provisioning , access-requests	9	148	February 19, 2026
Active Directory - pwdLastSet - update the value to force user to change password on next login ISC Discussion and Questions identity-security-cloud , provisioning , connectors	11	2484	March 3, 2024
pwdLastSet and CREATE profile ISC Discussion and Questions identity-security-cloud , provisioning	7	330	December 9, 2024
Removing "Change password at next login" from Change password OOTB IIQ Discussion and Questions identityiq , password-management	11	620	October 14, 2024

pwdLastSet attribute in Active Directory

Related topics