Skip to main content
Skip to content

ResourcePasswordHistoryCheck

Which password changes must meet the directory's own password history and minimum age rules (history_check). Re-pushing a person's current password never does: that is reuse by definition. A value other than person_changes needs a connector that can apply the rules (its password paths declare x-provisioning.passwordHistory, as Active Directory's does); otherwise saving the resource fails with an issue at provisioning_profile.password.history_check.

enum ResourcePasswordHistoryCheck {
  always
  never
  person_changes
}

Values​

ResourcePasswordHistoryCheck.always​

Always, including account claims and password resets. Within the directory's minimum password age (one day by default in AD), an account claim or password reset is refused.

ResourcePasswordHistoryCheck.never​

Never.

ResourcePasswordHistoryCheck.person_changes​

When people change their own password (the default): a change, or setting this account's password.

Member Of​

ResourcePasswordBlock object ● ResourcePasswordBlockInput input