Expire Password on AD Account Create

BinghamtonUniversity / IAMBing

A Highly Configurable Identity & Access Management (IAM) Engine

MIT License

3 stars 0 forks source link

Expire Password on AD Account Create #21

Closed timcortesi closed 2 years ago

timcortesi commented 2 years ago

When we create a new account in ActiveDirectory (BU), we should set the password to "expired" such that the user MUST reset the password through the password reset app and cannot login (even if they know the password).

Also should double check the credentials we are setting for new user accounts in Google / AD. Go over this with @timcortesi

timcortesi commented 2 years ago

Probably one of these codes...

532 - password expired 533 - account disabled 701 - account expired 773 - user must reset password 775 - user account locked

alikemaltanriverdi commented 2 years ago

@timcortesi this issue has been addressed in IAMBing API, and I believe that we can close this out.

timcortesi commented 2 years ago

Marking this as closed / complete