Delivering password management capabilities
For providing password management capabilities, there are four main feature sets available in a hybrid scenario:
Self-Service Password Reset and Account unlock, MIM 2016
Password Change Notification Service to synchronize the actual AD password to different repositories, MIM 2016
Password Update functionality, ADFS 3.0 and ADFS 4.0
Password Self-Service Change, Reset and Account unlock, and AAD
The following figure shows the different capabilities in solution architecture:
What happens when a user resets their password in the cloud?
Check if password write-back services are running. If yes, proceed
Tip
The service checks that a user has a valid license assigned.
The user reaches the password reset screen and then enters the new password
The password is encrypted with a public key created for the process
The password is sent through HTTPS to the tenant bus relay
The connector password reset endpoint looks for the user object in the AD Connector Space through...
