Administration Guide › Password Management › Password Management in CA Identity Manager

Password Management in CA Identity Manager

CA Identity Manager includes several features for managing user passwords:

• Password Policies--These policies manage user passwords by enforcing rules and restrictions governing password expiration, composition, and usage.
• Password Managers--Administrators who have the Password Manager role can reset a password when a user calls the Help desk.
• Self-service password management--CA Identity Manager includes several self-service tasks that allow users to manage their own passwords. These tasks include:
  • Self Registration--Users specify a password when they register at a corporate Web site.
  • Change My Password--Users can modify their passwords without help from IT or helpdesk personnel
  • Forgotten Password--Users can reset or retrieve a forgotten password after CA Identity Manager verifies their identity.
  • Reset Password or Unlock Account--Users can reset or retrieve a forgotten password or unlock a windows account on a system where they access Identity Manager.
  • Forgotten User ID--Users can retrieve a forgotten user ID after CA Identity Manager verifies their identity.
• Password synchronization on endpoint accounts--Password changes are synchronized in CA Identity Manager, the Provisioning Server, and its target systems. New passwords are verified against Identity Manager password policies.