You are viewing limited content. For full access, please sign in.

Question

Question

Updating Passwords in Active Directory with Laserfiche Forms

asked on June 12, 2019

Is this something that can be accomplished? If it's something that can be done, we'd love to make that happen at our organization. It'd solve a few different problems and would save us all some time. Thanks!

0 0

Replies

replied on June 18, 2019

Hi Ryan,

Assuming you're talking about something like a "Password Update/Reset" form, I would not recommend it. Anything a user enters into a forms field (such as a new password) will become part of the forms instance history and viewable by administrators. Passwords should never be stored in their plaintext values, and even enabling something like SQL Server Transparent Database Encryption does not change that you're capturing and storing the true password value rather than a properly salted and hashed one.

There are a whole bunch of solutions out there that provide AD password reset functionality and are designed for it. Here are a few I found:

https://github.com/pwm-project/pwm 

https://www.manageengine.com/products/self-service-password/

https://thycotic.com/products/password-reset-server/

Note that Laserfiche has not vetted and does not formally endorse any of these solutions.

2 0
You are not allowed to follow up in this post.

Sign in to reply to this post.