How to Use Direct Password Sync

This version of Enterprise Single Sign-On includes the Direct Password Sync from Windows feature. This enables you to bypass a Password Sync Adapter and update the password in the SSO Database directly from Windows.

Direct Password Sync from Windows is useful in the following situations:

• Your enterprise system requires Windows to Windows mapping.

• You need to update the External User’s password in the SSO database directly when a password change occurs for the Windows user. You can change the password on the back-end system (that corresponds to the external user) by using other mechanisms. For example, you can use Microsoft Identity Integration Server to update passwords in Resource Access Control Facility (RACF) on an IBM Mainframe using the RACF Management Agent.

To enable Direct Password Sync

1. Open Enterprise Single Sign-On.

2. In the scope pane, click Affiliate Applications.

3. Right-click the appropriate Affiliate Application.

4. Click Properties.

   The Affiliate Applications Properties dialog box appears.

5. Click the Options tab.

6. Select the Direct Password Sync from Windows check box.

7. Click OK.