Password Policy For Minimum Password Age Set to 1 Day Check is Not Working Via API When End User Password is Changed By An Administrator
(Doc ID 2401481.1)
Last updated on MARCH 15, 2019
Applies to:Identity Manager - Version 126.96.36.199.0 and later
Information in this document applies to any platform.
When Minimum Password Age has been set for 1 day, then a end user cannot change the password before 1 day of creating the password. But this check does not work incase the end user password is changed via an OIM Administrator via API.
The issue can be reproduced with the following steps:
1. Set Minimum Password Age value is set to 1 in Default Password policy.
2. Develop API call to OIM change/update password of an end user by creating the connection as oim system admin user.
But the Password policy for 1 day check does not happen when using the OIM API (note oim administrator credentials are used to change the end user password).
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!