Password synchronization

Password synchronization is the process of assigning and maintaining one password for all individual accounts that a user owns. Password synchronization reduces the number of passwords that a user must remember.

You can configure the system to automatically synchronize passwords for all individual accounts owned by a user. Then, the user must remember only one password. For example, a user has two individual accounts: a IBM Verify Identity Governance account and a Lotus Notes account. If the user changes or resets the password for the IBM Verify Identity Governance account, the Lotus Notes password is automatically changed to the same password as the IBM Verify Identity Governance password. Passwords might also be synchronized when you provision an account or restore a suspended account.

If password synchronization is enabled, the following changes occur:

A user cannot specify different passwords for other individual accounts owned by the user.
A user can specify different passwords for other individual accounts that are owned by the user by assigning an account category to the accounts.
A system administrator can also configure account categories that are excluded during password synchronization.

Note: When you provision an account or restore an account that was suspended, you must specify a password for the account. If password synchronization is enabled, you are not prompted for a password. Instead the individual account is automatically given the same password as the existing individual accounts of the user.