This content has been marked as final. Show 2 replies
As per your statements below, it seems you authenticate user by AD1 and are able to change password on AD1.
So it’s clear that your IDM user interface has been customized and set Login Module Groups on AD1 by default login Module is set on “Identity System User ID / Password Login Module”.
Login Module means from which resource you want to authenticate user and get him/her logged in IdM application.
So please check your user Interface login Modules and add AD2 resource as well, after that you will see after changing the password it will change the password on AD2 as well.
Below is the Tabs name you can see you login Module name and there is Button “Manage login Module Groups” once you click on that you will go to login modules page.
Security—Login- User Interface
Hope that will help you!!!
Thank you for your response. Unfortunately AD1 and AD2 are already listed on the login module group for the User Interface as 'sufficient'. It seems whichever module is listed first is the one that has the password RESET performed on when the user supplies the new password.
I figured there must be a delivered workflow somewhere where I can specify which resources to change the password on - especially if this does not work as you, and I would have expected.