Implementation Guide › Managing Identities and Access › Password Management

Password Management

Identity Manager includes several features for managing user passwords:

• Password Policies—These policies manage user passwords by enforcing rules and restrictions governing password expiration, composition, and usage.

  Note: For advanced password policies, configure integration with SiteMinder. For more information, see the Installation Guide.

• Password Managers—Administrators who have the Password Manager role can reset a password when a user calls the Help desk.
• Self-Service Password Management—Identity Manager includes several self-service tasks that allow users to manage their own passwords. These tasks include:
  • Self Registration—Users specify a password when they register at a corporate web site.
  • Change My Password—Users can modify their passwords without help from IT or Help Desk personnel
  • Forgotten Password—Users can reset or retrieve a forgotten password after Identity Manager verifies their identity.
  • Forgotten User ID—Users can retrieve a forgotten user ID after Identity Manager verifies their identity.
• Password Synchronization (for use with provisioning only)—Password changes are synchronized in Identity Manager and in accounts on target systems called endpoints. New passwords are verified against Identity Manager password policies.