Your suggested change has been received. Thank you.

close

Suggest A Change

https://thales.na.market.dpondemand.io/docs/dpod/services/kmo….

Thales Logo

All

  • All
back

SafeNet Agent for Password Self-Service

Solution Testing

search

Please Note:

Solution Testing

Tip

It is a good practice to test the agent before deployment. After the agent is fully configured, add a policy above the Password Self-Service blocking policy. The new policy can be dedicated to the Password Self-Service agent, but also to a small group of test users. You can then test the various conditions.

Password Reset Flow

Password reset can be performed using the password reset URL.

Using password reset URL

  1. Copy and paste the following URL in a browser:

    https://<FullyQualifiedDomainName>/passwordselfservice?userName=<username>

    where,

    • FullyQualifiedDomainName is the FQDN of the agent-installed machine.
    • username is the username that must be mapped to User ID field in SAE.

    For example, the password reset URL for the user ID JohnDoe will be https://<FullyQualifiedDomainName>/passwordselfservice?userName=JohnDoe

  2. Enter the password and click Login to complete the authentication.

    PSS

  3. After successful authentication, the Reset Domain Password window opens, perform the following steps:

    a. Enter the New Password as per the password requirements.

    c. Re-enter the password in the Confirm Password field.

    c. When all password requirements are met, the Reset Password button becomes enabled. Click Reset Password.

    PSS

    • When the password is successfully reset and synchronized with SAE, the following success message is displayed:

      PSS

    • If the password is reset successfully but the user’s domain password is not synchronized, the following message is displayed:

      PSS

      Click here to view details about message customization.

    • If the operation times out after two minutes, the following message is displayed:

      PSS

    • If the user fails to reset the password on the first attempt, the following message is displayed:

      PSS

      After all retry attempts are exhausted, the Unable to change password message is displayed.

      PSS

Customizing the Password Sync Time

The newly reset/changed password is immediately synced to SAE. However, the user may get a different wait time message (Default: 20 minutes) in the following two scenarios:

  • If for any reason, for example, network latency, the new password is not synced to SAE immediately. The new password will be effective in SAE after the next sync agent runs.

  • When AD password validation is delegated to a third-party (like Azure AD). The new password will be effective after the password synchronization between AD and third-party.

Note

This wait time duration in the message can be customized by customers, depending upon the user password synchronization frequency between the AD and SAE or third-party.

Perform the following steps to change the wait time in the message:

  1. Open Windows Explorer on the agent installed machine and go to <InstallationDirectory>\Publish\wwwroot\Json.

  2. Open the Json file Configurable.json in any text editor.

  3. Modify the key logindelay and update its value as per your requirement. For example, 30.

    Default: 20

  4. Save the file.

    The wait time duration in the message will be updated successfully.

On this page