Scheduled task enrolment email using adm-PasswordSelfServiceEnrollmentPolicyDN

Question

Hi Team

I am testing out a scheduled task to send out an email for password self service enrolment and located a previous question which suggested using the adm-PasswordSelfServiceEnrollmentPolicyDN property to determine if a user is enrolled or not however during my tests if i scope the task to a set of users which contains some already enrolled users the enrolled users also receive the enrolment invitation

Is the adm-PasswordSelfServiceEnrollmentPolicyDN property still the correct one to use with the value of empty or has the state of a users self service enrollment moved to another property?

Answer 1

Hello Richard,

Unfortunately, the approach will not work as new authentication options were added since 2012 (e.g. via mobile applications). However, there is currently a setting in Password Self-Service policies that specifies how often enrollment notifications should be automatically sent to users who are not enrolled yet.

If using the option does not meet your needs, please, provide all the possible details regarding the desired behavior with live examples.

Comments

Basically we want to send through a preliminary invitation html email targetting staff who have yet to enroll with more information about password self service via a scheduled task and then have another scheduled task which is a more compact html version of the same email which will be reminding the staff to enroll.

---

Hello Richard,

Thank you for clarifying. It can be done using a scheduled task configured for the Domain-DNS object type that will send the reminders in bulk. For us to provide you with detailed instructions, please, specify how exactly should it be distinguished whether a user should receive the first email or the second one. A live example of the desired workflow would be much appreciated.