How to use TSB_GetPassword function

We upgraded our Dev Identity Manager instance from version from 7.1.3 to 9.2. In 7.1.3, we were leveraging out of the box Vi_GetPassword function to get encrypted CentralPassword field onto UserPassword field on ADSAccount table. We noticed that in 9.2, Vi_GetPassword is replaced with TSB_GetPassword function but we do not know how to use this function as it requires additional parametes speciallty IEntity as object

Anyone has used this newer function. If yes, can someone please provided details on how to use this

Parents

0 Markus Weiss-Ehlers 7 months ago

Version 9.2 uses password policies introduced with some version after 7.1.3.

Please check the documentation around the usage and about the usage of the central password to update passwords for linked user accounts of the identity.

https://support.oneidentity.com/technical-documents/identity-manager/9.1/identity-management-base-module-administration-guide/22#TOPIC-1874845

https://support.oneidentity.com/technical-documents/identity-manager/9.1/identity-management-base-module-administration-guide/22#TOPIC-1874848

This should better explain the parameters used in the new TSB_GetPassword Script. You should also look in the template at ADSAccount.UserPassword to understand the usage of the script.

And please remember that since 8.2 the QER | Person | UseCentralPassword | PermanentStore configuration
parameter has been deleted.

Some additional threads:

RE: QER_Person_Publish_CentralPassword failed to sync with Azure AD
RE: Passing an already encrypted password to AD user creation via Account Definiton
Cancel
Up 0 Down

Reply

Verify Answer

Cancel

Reply

0 Markus Weiss-Ehlers 7 months ago

Version 9.2 uses password policies introduced with some version after 7.1.3.

Please check the documentation around the usage and about the usage of the central password to update passwords for linked user accounts of the identity.

https://support.oneidentity.com/technical-documents/identity-manager/9.1/identity-management-base-module-administration-guide/22#TOPIC-1874845

https://support.oneidentity.com/technical-documents/identity-manager/9.1/identity-management-base-module-administration-guide/22#TOPIC-1874848

This should better explain the parameters used in the new TSB_GetPassword Script. You should also look in the template at ADSAccount.UserPassword to understand the usage of the script.

And please remember that since 8.2 the QER | Person | UseCentralPassword | PermanentStore configuration
parameter has been deleted.

Some additional threads:

RE: QER_Person_Publish_CentralPassword failed to sync with Azure AD
RE: Passing an already encrypted password to AD user creation via Account Definiton
Cancel
Up 0 Down

Reply

Verify Answer

Cancel

Children

No Data