<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Ubuntu;
panose-1:2 11 5 4 3 6 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.DefaultFontHxMailStyle
{mso-style-name:"Default Font HxMail Style";
font-family:"Ubuntu",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:654990549;
mso-list-template-ids:-1;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span class=DefaultFontHxMailStyle>We use the Email notification feature in midpoint for the same type of scenario, it sends a ‘welcome’ type email that includes the pre-expired password and id, it gets sent to their personal email address that comes from our campus system. However, we don’t use the reset functionality in midpoint yet, we use pwm with a api post change script that sets the password in midpoint.<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='border:none;padding:0in'><b>From: </b><a href="mailto:rspellman@bates.edu">Robert Spellman</a><br><b>Sent: </b>Thursday, April 16, 2020 9:29 AM<br><b>To: </b><a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><br><b>Subject: </b>[midPoint] Initial credential distribution and password reset</p></div><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><div><div><p class=MsoNormal>We are an educational institution looking at replacing our IDM solution. Every summer, we need to be able to provision hundreds of user accounts for new faculty and students, and provide them the ability to login the first time and set up their credentials. We assign each user their username and email address, which is automatically generated based upon a combination of first and last name.</p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I have a test implementation of midPoint running, with three resources defined. The first resource pulls in data from a csv file, which mimics our Ellucian Banner system, which is the source of a majority of our user attributes. Importing this resource generates username and email address, and automatically assigns a role, which begins the process of provisioning accounts within the other two resources, Google (for email) and Active Directory.</p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I have a few questions:</p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'>How do others handle distribution of the credentials to allow new users to login to midPoint to set their password? In our current IDM, we assign a one time password which is pre expired, and can only be used to login to the IDM and allow them to enter a new password.</li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'>How do others handle the situation where a user has forgotten their password? I've seen the old and new password reset configuration pages within the wiki. I'm hoping someone has some other thoughts on how to do this.</li></ol><div><p class=MsoNormal>For most users, we do have an additional email address for them, which we could use as the email accounts which we send their password reset link.</p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><div><div><div><div><div><div><div><div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td colspan=2 style='padding:0in 0in 3.75pt 0in'><p class=MsoNormal><span style='font-size:13.5pt;font-family:"Arial",sans-serif;color:#F7751F'>Robert Spellman<o:p></o:p></span></p></td></tr><tr><td colspan=2 style='padding:0in 0in 0in 0in'><p class=MsoNormal><i><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'>Associate Director for Network Services</span></i><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'><o:p></o:p></span></p></td></tr><tr><td colspan=2 style='padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'>Information and Library Services<o:p></o:p></span></p></td></tr><tr><td colspan=2 style='padding:0in 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'>Bates College</span></b><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'><o:p></o:p></span></p></td></tr><tr><td width=20 valign=top style='width:15.0pt;padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#F7751F'>p:<o:p></o:p></span></p></td><td valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'>207-786-6422<o:p></o:p></span></p></td></tr><tr><td width=20 valign=top style='width:15.0pt;padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#F7751F'>a:<o:p></o:p></span></p></td><td valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'>110 Russell Street, Lewiston, ME 04240<o:p></o:p></span></p></td></tr><tr><td width=20 valign=top style='width:15.0pt;padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#F7751F'>w:<o:p></o:p></span></p></td><td valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'><a href="http://www.bates.edu/" target="_blank"><span style='color:#1DA1DB'>www.bates.edu</span></a> </span><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#F7751F'>e: </span><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333'><a href="mailto:rspellmann@bates.edu" target="_blank"><span style='color:#1DA1DB'>rspellman@bates.edu</span></a><o:p></o:p></span></p></td></tr></table></div></div></div></div></div></div></div></div></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p></div></body></html>