Implementation Guide › Managing Identities and Access › Password Management

Password Management

CA Identity Manager includes several features for managing user passwords:

• Password Policies—These policies manage user passwords by enforcing rules and restrictions governing password expiration, composition, and usage.

  Note: For advanced password policies, configure integration with SiteMinder. For more information, see the Installation Guide.

• Password Managers—Administrators who have the Password Manager role can reset a password when a user calls the Help desk.
• Self-Service Password Management—CA Identity Manager includes several self-service tasks that allow users to manage their own passwords. These tasks include:
  • Self Registration—Users specify a password when they register at a corporate web site.
  • Change My Password—Users can modify their passwords without help from IT or Help Desk personnel
  • Forgotten Password—Users can reset or retrieve a forgotten password after CA Identity Manager verifies their identity.
  • Forgotten User ID—Users can retrieve a forgotten user ID after CA Identity Manager verifies their identity.
• Password Synchronization (for use with provisioning only)—Password changes are synchronized in CA Identity Manager and in accounts on target systems called endpoints. New passwords are verified against CA Identity Manager password policies.