Skip to main content

PasswordResetSettings

This set of password reset settings contains the configuration to perform password reset operations such as change, reset, etc.

Examples​

The following example declares a password reset settings.

    <PasswordResetSettings Identifier="default" BeneficiaryEmailBinding="AssignedResourceType:Owner.Directory_User:MainRecord.Mail"
        BeneficiaryFullNameBinding="AssignedResourceType:Owner.Directory_User:MainRecord.InternalDisplayName"
        NotifiedEmailBinding="AssignedResourceType:Owner.Directory_User:MainRecord.Organization.Manager.MainRecord.Mail"
        NotifiedFullNameBinding="AssignedResourceType:Owner.Directory_User:MainRecord.Organization.Manager.MainRecord.InternalDisplayName"
        Mode="1" DefaultPassword="Usercube@2019" MustChange="true"
        AutoGenerate="false" DisableNotifications="false" GeneratedLength="12" />

Password length and counts​

The following example makes Identity Manager generate a password with at least 12 characters in total, at least 8 lowercase characters, 4 uppercase characters, 2 digits and 2 symbols.

<PasswordResetSettings AutoGenerate="true" GeneratedLength="12" GeneratedLowerCaseCharsCount="8" GeneratedUpperCaseCharsCount="4" GeneratedDigitCharsCount="2" GeneratedSymbolCharsCount="2"/>
note

As the total of all counts (16) is greater than the length (12), the password length will be the count total (16).

The following example makes Identity Manager generate a password with at least 12 characters in total, at least 8 lowercase characters, 4 uppercase characters, 2 digits and 2 symbols.

<PasswordResetSettings AutoGenerate="true" GeneratedLength="8" GeneratedLowerCaseCharsCount="1" GeneratedUpperCaseCharsCount="1" GeneratedDigitCharsCount="1" GeneratedSymbolCharsCount="1"/>
note

As the total of all counts (4) is lower than the length (8), the password will be generated with 8 characters, among them 1 lowercase character, 1 uppercase character, 1 digit, 1 symbol, and 4 more random characters.

The generated password's strength can also be checked via a regular expression (regex) through StrengthCheck. Thus, the following example makes Identity Manager generate a password with at least 9 characters including at least one digit, one lowercase letter, one uppercase and one special character.

<PasswordResetSettings AutoGenerate="true" StrengthCheck="'^..........*$','^.*[0-9].*$', '^.*[a-z].*$', '^.*[A-Z].*$', '^.*[^A-Za-z0-9].*$'"/>

Properties​

PropertyDetails
AutoGenerate default value: falseType: Boolean Description: true to make Identity Manager generate the password automatically.
BeneficiaryEmailBinding optionalType: Int64 Description: Binding to the email address property whose password is to be reset.
BeneficiaryFullNameBinding optionalType: Int64 Description: Binding to the full name property of the user(s) whose password is to be reset.
DefaultPassword optionalType: String Description: Default password to set when AutoGenerate is set to false.
DisableNotifications default value: falseType: Boolean Description: true to disable the mailing of notifications concerning password reset.
GeneratedDigitCharsCount default value: 2Type: Int32 Description: Number of digit characters in the password generated by Identity Manager when AutoGenerate is set to true.
GeneratedLength default value: 12Type: Int32 Description: Length of the password generated by Identity Manager when AutoGenerate is set to true.
GeneratedLowerCaseCharsCount default value: 6Type: Int32 Description: Number of lower case characters in the password generated by Identity Manager when AutoGenerate is set to true.
GeneratedSymbolCharsCount default value: 2Type: Int32 Description: Number of symbol characters in the password generated by Identity Manager when AutoGenerate is set to true.
GeneratedUpperCaseCharsCount default value: 2Type: Int32 Description: Number of upper case characters in the password generated by Identity Manager when AutoGenerate is set to true.
Identifier requiredType: String Description: Identifier of the set of password reset settings.
Mode default value: 0Type: Int64 Description: Mode used by the password reset service. 0 - Disabled. 1 - One-Way. 2 - Two-Way.
MustChange default value: falseType: Boolean Description: true to force users to modify their passwords on the first login.
NotificationCC optionalType: String Description: Email address to set as CC recipient of all password reset notifications.
NotifiedEmailBinding optionalType: Int64 Description: Binding to the email address property of the person to be notified.
NotifiedFullNameBinding optionalType: Int64 Description: Binding to the full name property of the person to be notified.
StrengthCheck optionalType: String Description: Regular expression (regex) that generated passwords must match, when AutoGenerate is set to true. Note: the strength of passwords set manually by users can be configured via PasswordTestsSetting.