Synchronize AD user password change with external directory using API

Question

Is it possible to trigger an external API request to update another directory whenever an AD user changes his password? Even if the password change didn't occur using adaxes, but directly in Active Directory? Thank you.

Comments

If the password change takes place via AD, it is desirable to pay special attention to the security parameters in the form of adfs authentication, which in turn will provide maximum protection using a one-time password generated by security tokens. these parameters are also distributed on adfs and make this approach universal and reliable.

Answer 1

Hello Nicolas,

Is it possible to trigger an external API request to update another directory whenever an AD user changes his password?

Yes, it is possible using a PowerShell script in a Business Rule triggering After resetting password of a user. In the script, use the %unicodePwd% value reference to get the new user password.

Even if the password change didn't occur using adaxes, but directly in Active Directory?

Unfortunately, there is no such possibility.