Novell Doc: Identity Manager User Application: Administration Guide

19.6 IDM Change password portlet

This self-service portlet lets the user change (reset) their Universal Password, according to the assigned password policy. It uses that policy to display the rules that the new password must conform to.

If Universal Password is not enabled, this portlet changes the user’s eDirectory (simple) password, as permitted in the user's Password Restrictions.

19.6.1 Requirements

The IDM Change Password portlet has the following requirements:

Topic	Requirements
Directory Abstraction Layer configuration	No directory abstraction layer configuration is required for this portlet.
Password policy	This portlet does not require a password policy, unless you want to use advanced password rules (with Universal Password enabled).
Universal Password	To use this portlet for a Universal Password, the setting Allow user to initiate password change must be enabled in the Advanced Password Rules of the user's assigned password policy. To use this portlet for an eDirectory (simple) password, the setting Allow user to change password must be enabled in the user’s Password Restrictions.

Topic

Requirements

Directory Abstraction Layer configuration

No directory abstraction layer configuration is required for this portlet.

Password policy

This portlet does not require a password policy, unless you want to use advanced password rules (with Universal Password enabled).

Universal Password

To use this portlet for a Universal Password, the setting Allow user to initiate password change must be enabled in the Advanced Password Rules of the user's assigned password policy.

To use this portlet for an eDirectory (simple) password, the setting Allow user to change password must be enabled in the user’s Password Restrictions.

19.6.2 Usage

To use the IDM Change Password portlet, you need to know about the following:

How IDM Change Password is used during login

During the login process, the IDM Login Portlet automatically redirects to the IDM Change Password portlet whenever the user needs to reset an invalid password (for example, the first time a user attempts to log in to an application after an administrator implements a password policy that requires users to reset their passwords).

The IDM Forgot Password portlet also redirects to IDM Change Password automatically if the user’s assigned password policy specifies reset password as the action for forgotten password situations.

Using IDM Change Password in the user application

By default, the user application provides users with the password change self-service using the IDM Change Password portlet. For example: