User must change password at next logon #186
-
Hello, If I set in Active Directory a new user with the flag "User must change password at next logon" then I get the message "Your password has expired. Type your updated password and try again". I do not have the possibility to change the password. Yes, this is normal for ADFS, because the old password has never been entered and therefore does not exist. if the user connects with password / login ADFS will offer a form to change the password, if the user must change the password at the next login If the password is not expired, I can login with user/password and TOTP token and afterwards change the password. I have disabled the default ADFS change password possibility (/adfs/portal/updatepassword/) and the ADFSMFA CustomUpdatePassword is set to true. ADFSMFA "Password management" is enabled for the users. PS.: In the ADFSMFA Security Configuration windows, there's a Password Policy with a setting "Lock out the user if password has expired". But it doesn't make any difference to what I'm testing. I also have a question about locking a user. No, the mfa is not taken into account by ADFS concerning ExtranetLockOut. Regards and thanks for the support. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
Mark it as answer. |
Beta Was this translation helpful? Give feedback.
Mark it as answer.