Skip to main content

Applying web password change restrictions

You can apply web password change rules globally, to the default group, or to groups of target systems, to control how passwords on member systems are related (must be the same, can be the same, must be different) and how much control the user should have over this.

In the simplest scenario, users have passwords on a single target system group where synchronization is required. For users, the procedure is as simple as choosing a new password. In more complex scenarios, where varied policies are enforced, users may need to select the target system group before proceeding to the Change password web page.

To apply web password change restrictions:

  1. Click Manage the system > Resources > Target system groups then select the target system group you want to modify.

  2. In the Web password change restrictions section select one of the following:

    • Any number of accounts can be selected for a password change

      The user can choose which target systems (one, some, all) to change his password on. The password is changed and synchronized only for the selected target systems.

      By default, the Change passwords page is displayed with all accounts selected, and users must deselect the account if they do not want the password changed. You can change this behavior in the Change passwords (PSS) module settings .

    • All accounts are selected for a password change

      The user can only select the whole target system group. Individual target systems cannot be chosen. The password is changed and synchronized for all target systems belonging to the target system group.

    • Only one account can be selected for a password change

      The user can only select one target. The password is only changed for that target. This forces users to choose a different password for each target system in the group. By default, no account is selected.

See also

  • Target Systems to learn how to configure individual settings for individual target systems, including whether to allow password changes on a target system, or whether to display a target system on the Change passwords page.