Password Changing - Expired accounts also ?

[2097]

Hi Nick ,

 

Great program and been using it for a while ! but we are about to rely on the interface a little more so would like to ask you a few questions ?

 

Currently when i click "Me" and goto change Password, it says it doesnt meet the complexity requirements. As far as im aware it meets our AD requirements, is this set somewhere different on HAP ?

 

Also, i noticed when a user logs in with an account where the password expires it doesnt ask to change it. I noticed in a previous thread you was speaking about redirecting to OWA on exchange.. Is this possible ? as i dont seem to be able to see the setting .

 

Many thanks

Luke

[nickbro]

If you are getting that alert it's not coming from HAP+ as far as I can see.

 

If you want to password resettings/changing/expiring, I would strongly recommend setting HAP+ up behind AzureAD AppProxy SSO and use AzureAD for that.

 

It is coded to look for expired passwords, but not expiring passwords

[2097]

If you are getting that alert it's not coming from HAP+ as far as I can see.

 

If you want to password resettings/changing/expiring, I would strongly recommend setting HAP+ up behind AzureAD AppProxy SSO and use AzureAD for that.

 

It is coded to look for expired passwords, but not expiring passwords

 

Sadly we don't pay for that for the password write back feature , but do have inhouse exchange.. so gonna setup a link to that to reset passwords

 

Many thanks

[nickbro]

Pay? It's free, same with AppProxy.

[2097]

I thought password write back required a higher subscription on Azure.

[nickbro]

You are right, requires p1 or a3. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback

[2097]

You are right, requires p1 or a3. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback

 

Thank you , In the end i customized the PasswordExpired.aspx from OWA ( well made a copy and renamed it to "ResetPassword.aspx" and removed all the outlook goodness to make it look like just a HAP+ reset page . I linked it to the login page.

 

Couldnt justify paying for azure just for password expiry reset.