76
Chapter 4: Post-installation
The administrator chooses one of the following options for how the synchronization should set
the passwords for new users. The administrator determines the password policy on the Password
Setup Policy screen of the Console.
•
Do nothing.
If you have integrated Breeze with an external authentication system, there is no need for the
synchronization to create new passwords just for Breeze. Users will log in to Breeze according
to the mechanism of the external authentication system.
•
Send a link to set the password.
This policy option instructs Breeze to send an e-mail to each user that contains a URL they
may access to set their own password for accessing Breeze.
See the “Map the Breeze user profile to the Directory Service” on page 65 and “Map the Breeze
group profile to the Directory Service” on page 68.
•
Set the password to the value on an LDAP attribute by entering the LDAP attribute in the text
box provided.
This policy option sets the user's initial password to the value of an attribute (also known as a
field) in the corresponding LDAP entry. For example, if the LDAP directory contains users'
employee IDs and you specified the employee ID LDAP attribute as the password, users can
log in to Breeze using their employee ID as their password. After users have logged in to
Breeze, they can change their passwords.
If validation rules are specified in the password policy, the rules are ignored when setting the
initial password, but are enforced for all subsequent password changes.
Note:
The usual password validation policies are not applied to this initial value.
Click Save to set the password policy.
Define the deletion policies
When a principal is deleted from an external directory, the organization’s deletion policy controls
whether or not to keep the records of the principal in the Breeze database. Breeze may hold
additional, unsynchronized field data for the principal that the admin may wish to use in another
application. Keeping the records avoids erroneously deleting a user if the synchronization settings
did not reflect a change in the directory server configuration.
The administrator determines what happens when a principal is deleted from the external
directory: either no action is taken or the synchronization deletes the Breeze users and groups that
were deleted from the directory service.
Click Save to continue.
Summary of Contents for BREEZE 5
Page 1: ...Installation and Configuration Guide...
Page 30: ...30 Chapter 1 Before You Begin...
Page 56: ...56 Chapter 3 Installing and Upgrading Breeze...
Page 100: ...100 Index...
