Using DirX Identity Web Center for Password Management

This operation displays a summary of your user data, including general data and a list of your accounts in DirX Identity target systems.All the fields displayed in this page are read-only.See the context-sensitive help in the DirX Identity Manager or in the DirX Identity Connectivity or Provisioning Administration Guide for a description of the fields displayed in this page.

The Accounts section provides information about each account you have in a target system, including the target system name, the account state and the time and result of the last password change. Only accounts suitable for password synchronization are displayed.

Use this operation to change your password. You can change your DirX Identity user password, the password of your master account and the passwords of your other accounts. The old password is always the most recent DirX Identity user password. The new password will be applied to the selected entries (User and master account, Other accounts).

The Password policy section shows the password policies that apply to your entry. When you change your password, the password you choose must comply with these policies. If there is no password policy, this part of the page is empty.

The User and master account section provides the Synchronize password box. If you want to change the master target system password and the user password, check this box. If you use external authentication the master account is displayed. For initial password setting you cannot uncheck user and master password synchronization

The Other accounts section lists the accounts you have in the connected target systems. To select the accounts whose passwords you want to change, check the box in the Synchronize Password column for the account. By default, either all of your accounts are selected (if you have never used this operation before) or the accounts you selected last time you ran the operation are selected.

The Enter password section provides fields for entering the old password and entering a new password twice. Click in the space provided in Old password and then enter your old password. Next, click the space provided in New password and enter the new password according to the criteria (if any) shown in Password policy. Click in Repeat password and then enter the new password again.

Click Submit to start the password change process, or click Cancel to exit the dialog and return to your user summary page.

When you click Submit, Web Center for Password Management opens a new page that displays the password change states (pending, succeeded or failed) for the accounts you have selected. The page is automatically refreshed until no more password change is in state pending. To avoid infinite loops, the number of attempts to determine the password changes states is limited.

Use this operation to manage the authentication (challenge / response) questions to be displayed if you have forgotten your password.

The authentication questions are separated in up to three sections:

To add a challenge / response pair to a section, select the add icon at the end of the section. To remove a challenge / response pair, click the delete icon in the respective row.

Click Submit to store your data. Click Cancel to return to the user summary without saving your changes.

Notes:

Resetting a user’s password from the Web Center for Password Management Service Desk consists of the following steps:

The next sections describe these steps.

Use the Password Policies page to create, modify and delete password policies. The top of the page displays a table of existing password policies.

To create a new password policy, click the Create Password Policy button. For a description of the password policy parameters, see the section "Password Policies" in the DirX Identity Provisioning Administration Guide and the topic "Password Policy Parameters" in the context-sensitive help.

To change an existing password policy, click it in the list. For a description of the password policy parameters, see the section "Password Policies" in the DirX Identity Provisioning Administration Guide and the topic "Password Policy Parameters" in the context-sensitive help.

To delete an existing password policy, check the box that appears at the beginning of its line. You can select several policies to be deleted. Click the Delete password policies button to remove the selected policies.

The Reports operation allows you to generate reports on selected DirX Identity objects, like users, assignments, privileges, and so on.

To select the objects on which to report, use the Search base and Scope fields in the Objects for the Report section. In the Templates section, Web Center displays the reports that you can run on the objects you selected.

For example, suppose you want to access the reports you can run on the users in the Finances organizational unit in the My-Company sample domain’s Users tree:

The reports displayed in Templates depend on the list of pre-configured reports that the DirX Identity domain provides for the selected objects and on the access policies for the logged-in user. If no report templates are displayed, it means that you are not allowed to run any report on your object selection.

To run a report, click it in the list and then review the displayed result (sometimes it takes a little time for the report to be displayed). To download the report to a file, scroll to the bottom of the page and then click Save as file. Select the correct location and name of the file.