Sending password to email in workflow

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

I’m trying to create an workflow, to send the password of the active directory account.

But in the array results the password is null.

I’m trying to get this information from the accountRequests information. So that when an account is created the workflow triggered and will send all the necessary information by email.
Trigger:
$.accountRequests[?(@.accountOperation == “Create” && @.provisioningResult== “committed” && @.provisioningTarget == “VGZ Admins Active Directory”)]

I’m thinking this is part of the security that it is null ? Or what is otherwise the best way to send the password of the account.

2

Hi Dennis,

Sending passwords via email is generally not recommended as it is not a secure practice. SailPoint Identity Security Cloud (ISC) does not provide a direct method to send passwords in emails using workflows, as this would be a security risk.

Instead, SailPoint ISC focuses on secure password management practices. When a password is changed or reset, the system typically sends an email notification to the user informing them that their password has been updated, but it does not include the actual password in the email. If you need to implement a password change or reset process, SailPoint ISC offers more secure alternatives:

  1. Password Change Notifications: When a user’s password is changed, ISC can send an email notification informing the user that their password has been updated. This email does not contain the password itself but confirms the action has taken place.
  2. Password Reset Links: For password resets, ISC can send emails containing secure links that allow users to reset their passwords themselves. These links are typically valid for a limited time (e.g., 120 minutes) for security reasons.
  3. Verification Codes: ISC can send verification codes to users via email or SMS, which they can use to authenticate themselves during the password reset process.
  4. Security Questions: Users can be prompted to answer security questions as part of the password reset process.

These methods ensure that password management remains secure while still providing users with the necessary means to manage their accounts.

Please mark it as solution if we have answered your question.

3

Thanks for your answer. I’m looking into it.

It looks like the function Password Manager from ISC is designed for this issue.

But it’s greyed out in system features. How can I turn it on ?

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.