Azure AD password not set

Hello,

In Azure AD synch project we try to  push the creation of Azure AD accounts. We have some persons in IAM with empty password (CentralPassword=null).

When the provisionning is launched for them, it fails with this error : The value of 'Password' on 'Azure Active Directory user account' did not match the password policy restrictions of 'One Identity Manager password policy'.

We effectively set up some password policies to prevent provisionning with null or empty password in different target systems.

But in the case of Azure AD, we would like to bypass this by setting a default password for Azure AD Account if   (CentralPassword=null).

I have set up this the AADUser Table , "Password" colomn where in 'Value calculation' , we did this: 

If String.IsNullOrEmpty($FK(UID_Person).CentralPassword$) Then
value = "Default_pass34$)"
End If

But it still fails with the same error : The value of 'Password' on 'Azure Active Directory user account' did not match the password policy restrictions of 'One Identity Manager password policy'.

I can't see what is missing..

How could we force to set up default password in this case ?

Thnx

Parents
  • What version are you using?

    In addition, you do know that the CentralPassword will not be stored permanently, so it will near to always be null. It will only be stored (encrypted) as long as it is needed for password synchronization to the connected target system accounts.

    Do you have a password policy set for Azure AD in OneIM?

    When you are saying your sync project tries to push the creation of Azure AD accounts, are you referring to the ad-hoc projection workflow or did you create a custom sync workflow targeting Azure AD?



Reply
  • What version are you using?

    In addition, you do know that the CentralPassword will not be stored permanently, so it will near to always be null. It will only be stored (encrypted) as long as it is needed for password synchronization to the connected target system accounts.

    Do you have a password policy set for Azure AD in OneIM?

    When you are saying your sync project tries to push the creation of Azure AD accounts, are you referring to the ad-hoc projection workflow or did you create a custom sync workflow targeting Azure AD?



Children
No Data