Google Cloud Directory Sync : users not asked to change password at first log in

[GBC59]

Hi all,

 

I'm using Google Cloud Directory Sync to sync AD users to Google Workspace for Education.

 

I have set up a generic password for new users detected in the AD.

 

Everything is working fine except even if the box "force users to change password" is ticked in "Additional User Attributes", my new users are not asked to change their password when logging in for the first time in Google Workspace.

 

I've checked the XML config and I can see the line FORCE_PASSWORD_CHANGE which disappears when I untick the box. It makes me think the option is indeed taken into account.

 

If I use GAM with the command gam update user xxx changepassword on, it's working well.

 

Anyone would have a clue about what is going on ?

 

Thanks a lot !

Edited March 3, 2022 by GBC59

[snagrat]

This only takes affect on the first sync.

 

If the user already exists and was not set to change password then ticking box and re-syncing will not do anything.

 

I’ve actually had the issue the other way round when the box was ticked and I did not want users to be promoted to change the password. Was quicker for me to delete all and re-sync

[GBC59]

Hi and thanks for your reply!

 

I know the password sync does not affect existing users but I get this issue with a new user only created in AD and generated by GCDS.

 

That's why I don't understand why the generic password is indeed set up but the force change password is not set to true :/

[GBC59]

Hello everyone,

 

Just to tell you that after opening a ticket to Google Customer Care Portal and investigating with a Google tech guy, my issue is a software bug that is supposed to be fixed in the next GCDS release.

 

The only drawback is that the release date is currently unknown and there is no workaround for this.

 

Thought it would be useful to some!

 

Sincerely,