This page explains how you can configure Apache Syncope to set change password at next logon in Active Directory. For the basic configuration, you can refer to page Configure an Active Directory resource.

To force a user to change their password at next logon, you need to add a new attribute in the resource mapping.

Configure Active Directory resource

1. Open your browser and access to the Syncope administration console (http://host:port/syncope-console).
2. Log into the interface by providing the following credentials:
   1. Login: admin
   2. Password: password.
   
    
3. Create a new user schema (Schema)
   
4. Click on the Resources tab.
5. Click on Schema Mappings tab.
6. Click on Add button to insert attributes mapping.
7. Insert new mapping pwdLastSet.
   
   
   
   
8. Click on Save button.

Test your configuration

Create a new user in Active Directory with Apache Syncope

1. Open your browser and access to the Syncope administration console (http://host:port/syncope-console).
2. Log into the interface by providing the following credentials:
   1. Login: admin
   2. Password: password.
3. Create new user syncopetest.
   
   
   
   
4. Check the profile in Active Directory resource.