Windows Authentication Manager & Expired Password Change

[DanielCole]

We are currently experiencing an issue with the Windows Authentication Manager app where users are unable to change their password while logging in, in the case that their windows password has expired.

The users authenticates with their RSA pin and token successfully, and Windows prompts that the password has expired and needs to be changed. The users provides their old password, new password (and confirmation), however this doesn't get accepted and the user is pushed back to the login screen.

Looking for suggestions on what might be causing this behaviour. We have only recently implemented the system, so have just come across this scenario for the first time.

Thanks,
Daniel

[_EricaChalfin]

Daniel Cole‌,

I've moved your question to the RSA SecurID Access" data-type="space space where it will be seen by the product's support engineers, other customers and partners.  Please bookmark this page and use it when you have product-specific questions.

Alternatively, from the RSA Customer Support page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question.  From there, scroll to RSA SecurID Access" data-type="space‌‌ and click Ask A Question.  That way your question will appear in the correct space.

Regards,

Erica

[StevenSpicer]

Is your identity source connection to AD over SSL? You can only do password management over an SSL connection. Check the connection in the Operations Console under Deployment Configuration > Identity Sources > Manage Existing. You'll need SuperAdmin credentials to check it out.