Setting Active Directory unicode password when creating AD User accounts - HIDDEN pre 2017
Created: 2012-04-20 08:09:59Modified: 2018-02-14 16:13:34
Tags: Active Directory UnitySync
This mapping option is only valid for AD/Exchange 200x destinations when creating User accounts.
IMPORTANT: In order to do this, you MUST be syncing with to the Destination SSL port (port 636).
The following mapping can be used to generate a password via mapping for connections syncing to an AD Destination. It is NOT possible to pull the source password and sync it to the destination.
Create a custom object map and add a line for the unicodepwd attribute as follows:
u|unicodepwd=Password99
- In this example, the password will be set to “Password99”
u|unicodepwd=^givenname^
- In this example, the password will be set equal to the “given name” attribute of the synced object
Notes
With newer policy requirements, it may not be as simple as using ^givenname^ as this value will likely not meet the requirements. Verify your password format requirements before attempting to set unicodepwd.
If your connection is configured to create User accounts and you don’t configure a custom mapping to set the password, the password on each new acount will be blank.
Unicodepwd is in the no-mod attribs list, which means it only gets set on initial creation of AD User Accounts.