My Oracle Support Banner

Password Policy For Minimum Password Age Set to 1 Day Check is Not Working Via API When End User Password is Changed By An Administrator (Doc ID 2401481.1)

Last updated on MARCH 15, 2019

Applies to:

Identity Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

When Minimum Password Age has been set for 1 day, then a end user cannot change the password before 1 day of creating the password. But this check does not work incase the end user password is changed via an OIM Administrator via API.

STEPS
-----------------------
The issue can be reproduced with the following steps:

1. Set Minimum Password Age value is set to 1 in Default Password policy.

2. Develop API call to OIM change/update password of an end user by creating the connection as oim system admin user. 

Sample code 

 

But the Password policy for 1 day check does not happen when using the OIM API (note oim administrator credentials are used to change the end user password).

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.