Closed timcortesi closed 2 years ago
Probably one of these codes...
532 - password expired 533 - account disabled 701 - account expired 773 - user must reset password 775 - user account locked
@timcortesi this issue has been addressed in IAMBing API, and I believe that we can close this out.
Marking this as closed / complete
When we create a new account in ActiveDirectory (BU), we should set the password to "expired" such that the user MUST reset the password through the password reset app and cannot login (even if they know the password).
Also should double check the credentials we are setting for new user accounts in Google / AD. Go over this with @timcortesi