Skip to content

Commit 9bfdce1

Browse files
authored
NDM - Password re-insertion note (post sanitization changes) (#325)
* Fixed broken link * docs: Add password re-insertion warnings to schedules, jobs, and data sources - Added password re-insertion requirement warnings to all 11 schedule types - Added password field re-configuration warning for Synchronize job editing - Added service account password re-insertion warning for data source updates - Ensures users are informed of security requirements when editing configurations
1 parent 6ad9b23 commit 9bfdce1

File tree

13 files changed

+89
-29
lines changed

13 files changed

+89
-29
lines changed

docs/directorymanager/11.1/admincenter/datasource/manage.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,10 @@ string in their names are displayed.
2828
You can update the details provided for a data source, such as its display name, the service account
2929
credentials to connect to it, and any other info you provided while creating it.
3030

31+
:::important Password Re-insertion Required
32+
Due to security enhancements, when updating a data source, you must re-enter the **Service Account Password** even if you are not changing it. This is a required security measure to ensure password field sanitization across the product.
33+
:::
34+
3135
Follow the steps to update the details for a data source.
3236

3337
Step 1 – In Admin Center, click **Data Sources** in the left pane.

docs/directorymanager/11.1/admincenter/schedule/grouplifecycle.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ Step 2 – On the Identity Stores page, click the ellipsis button for an identit
3434

3535
Step 3 – Click **Schedules** under Settings in the left pane.
3636

37-
Step 4 – On the Schedules page, click **Add Schedule** and select **Group Life Cycle Job**.
37+
Step 4 – On the Schedules page, click **Add Schedule** and select **Group Life Cycle Job**.
3838
The Create Schedule page is displayed.
3939

4040
Step 5 – In the Schedule Name box, enter a name for the schedule.
@@ -90,6 +90,10 @@ the schedule in the identity store. Follow step 12 in the
9090
[Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule)
9191
topic for additional information.
9292

93+
:::important Password Re-insertion Required
94+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
95+
:::
96+
9397
Step 12 – To set notifications for the schedule, click **Notifications**.
9498

9599
1. On the Notifications dialog box, select the **Send group life extension notification** check box
@@ -102,7 +106,7 @@ Step 12 – To set notifications for the schedule, click **Notifications**.
102106

103107
Step 13 – On the Create Schedule page, click **Create Schedule**.
104108

105-
Step 14 – On the Schedules page, click **Save**.
109+
Step 14 – On the Schedules page, click **Save**.
106110
The schedule is displayed under Group Life Cycle. See the
107111
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic
108112
for additional information.

docs/directorymanager/11.1/admincenter/schedule/groupusageservice.md

Lines changed: 10 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ Step 2 – On the Identity Stores page, click the ellipsis button for an identit
3030

3131
Step 3 – Click **Schedules** under Settings in the left pane.
3232

33-
Step 4 – On the Schedules page, click **Add Schedule** and select **Group Usage Service Job**.
33+
Step 4 – On the Schedules page, click **Add Schedule** and select **Group Usage Service Job**.
3434
The Create Schedule page is displayed.
3535

3636
Step 5 – In the **Schedule Name** box, enter a name for the schedule.
@@ -66,13 +66,13 @@ Step 9 – You can specify containers as targets for the schedule. The schedule
6666
groups in those containers and sub-containers.
6767

6868
- Select the **Include all containers** check box to run the schedule on all the containers in the
69-
identity store.
69+
identity store.
7070
Or
7171
- Click **Add Container** to add one or more containers as targets. The Add Container(s) dialog box
7272
shows the domain name and the OUs in the identity store. Select the check boxes for the required
7373
containers and click **Add**; the selected containers are displayed in the Target(s) area. To
7474
exclude a sub-container, clear the check box for it on the Add Container(s) dialog box.
75-
- To remove a container in the Target(s) area, click **Remove** for it.
75+
- To remove a container in the Target(s) area, click **Remove** for it.
7676
To remove all target objects, click **Remove All**.
7777

7878
Step 10 – You can also specify one or more messaging servers. The job reads expansion logs from
@@ -98,13 +98,13 @@ Step 12 – After specifying the settings for triggers, click **Add**. The trigg
9898
Triggers area.
9999

100100
A schedule can have one or more triggers, allowing the schedule to be started in many ways. With
101-
multiple triggers, the schedule will start when any of the triggers occur.
101+
multiple triggers, the schedule will start when any of the triggers occur.
102102
To enable or disable a trigger - Click **Edit** for a trigger in the Triggers area and use the
103-
toggle button at the top of the Update Trigger dialog box to enable or disable the trigger.
103+
toggle button at the top of the Update Trigger dialog box to enable or disable the trigger.
104104
To remove a trigger - Click **Remove** for a trigger to remove it.
105105

106106
Step 13 – Click **Add Authentication** in the Authentication area to specify an account for running
107-
the schedule in the identity store.
107+
the schedule in the identity store.
108108
The Authentication dialog box displays your accounts in the respective identity store that you have
109109
used for signing in. Select an account to authenticate with it or click **Login with a different
110110
user** to provide the credentials of another account to run the schedule in the identity store.
@@ -114,6 +114,9 @@ Make sure this account falls under a high priority security role that has elevat
114114
in the identity store (for example, Administrator).
115115
:::
116116

117+
:::important Password Re-insertion Required
118+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
119+
:::
117120

118121
:::note
119122
If you are creating this schedule in a Microsoft Entra ID identity store, you can only specify
@@ -125,7 +128,7 @@ section of the [Schedules](/docs/directorymanager/11.1/admincenter/schedule/over
125128

126129
Step 14 – On the Create Schedule page, click **Create Schedule**.
127130

128-
Step 15 – On the Schedules page, click **Save**.
131+
Step 15 – On the Schedules page, click **Save**.
129132
The schedule is displayed under Group Usage Service. See the
130133
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic
131134
for additional information.

docs/directorymanager/11.1/admincenter/schedule/manage.md

Lines changed: 14 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ Step 2 – On the Identity Stores page, click the ellipsis button for an identit
2121
Step 3 – Click **Schedules** under Settings in the left pane.
2222

2323
Step 4 – On the Schedules page, click the plus sign next to a job name to view the schedules defined
24-
for it.
24+
for it.
2525
The following is displayed for a schedule:
2626

2727
| Label | Description |
@@ -90,7 +90,7 @@ Step 3 – Click **Schedules** under Settings in the left pane.
9090

9191
Step 4 – On the Schedules page, click the plus sign for a job to view the schedules defined for it.
9292

93-
Step 5 – Use the Enable toggle button for a schedule to enable or disable it.
93+
Step 5 – Use the Enable toggle button for a schedule to enable or disable it.
9494
A disabled schedule is not executed in the identity store.
9595

9696
Step 6 – Click **Save**.
@@ -124,6 +124,14 @@ Step 7 – Click **Update Schedule**.
124124

125125
Step 8 – Click **Save** on the Schedules page.
126126

127+
:::important Password Re-insertion Required
128+
Due to security enhancements, when editing any schedule settings, you must re-enter the account password in the Authentication section even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. The password must be re-entered when:
129+
- Updating triggers
130+
- Updating targets
131+
- Updating notification settings
132+
- Making any other changes to the schedule
133+
:::
134+
127135
## Update Targets for a Schedule
128136

129137
Targets in a schedule are the objects processed by that schedule.
@@ -142,7 +150,7 @@ Step 4 – On the Schedules page, click the plus sign for a job to view the sche
142150
Step 5 – Click the ellipsis button for a schedule and select **Edit**.
143151

144152
Step 6 – On the Edit Schedule page, the Target(s) area displays the target objects for the
145-
schedule.
153+
schedule.
146154
Target types differ for different schedule types. For example, you can set containers as targets for
147155
a Group Lifecycle schedule; and jobs and job collections for a Synchronize schedule. Other
148156
schedules, such as a User Lifecycle schedule, may not require a target, as they execute certain
@@ -172,11 +180,11 @@ Step 4 – On the Schedules page, click the plus sign for a job to view the sche
172180
Step 5 – Click the ellipsis button for a schedule and select **Edit**.
173181

174182
Step 6 – On the Edit Schedule page, click the **Notifications** button to update notification
175-
settings for the schedule.
183+
settings for the schedule.
176184
Notification settings differ for different schedule types. For example, a Smart Group Update
177185
schedule has a different set of notification options from a Group Lifecycle schedule. Other
178186
schedules, such as the Directory Manager Entitlement and Workflow Acceleration schedules, do not
179-
have notification settings.
187+
have notification settings.
180188
To manage the notification settings for a schedule, refer to the instructions for the respective
181189
schedule.
182190

@@ -232,7 +240,7 @@ Step 3 – Click **Schedules** under Settings in the left pane.
232240

233241
Step 4 – On the Schedules page, click the plus sign for a job to view the schedules defined for it.
234242

235-
Step 5 – Click the ellipsis button for a schedule and select **Delete**.
243+
Step 5 – Click the ellipsis button for a schedule and select **Delete**.
236244
The Delete option is not available for system-defined schedules.
237245

238246
Step 6 – On the Delete Schedule dialog box, click **Delete**.

docs/directorymanager/11.1/admincenter/schedule/managedbylifecycle.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,9 +83,13 @@ the schedule in the identity store. Follow step 12 in the
8383
[Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule)
8484
topic for for additional information.
8585

86+
:::important Password Re-insertion Required
87+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
88+
:::
89+
8690
Step 12 – On the Create Schedule page, click **Create Schedule**.
8791

88-
Step 13 – On the Schedules page, click **Save**.
92+
Step 13 – On the Schedules page, click **Save**.
8993
The schedule is displayed under Managed By Life Cycle. See the
9094
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic
9195
for additional information.

docs/directorymanager/11.1/admincenter/schedule/membershiplifecycle.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -106,9 +106,13 @@ the schedule in the identity store. Follow step 12 in the
106106
[Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule)
107107
topic for additional information.
108108

109+
:::important Password Re-insertion Required
110+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
111+
:::
112+
109113
Step 12 – On the Create Schedule page, click **Create Schedule**.
110114

111-
Step 13 – On the Schedules page, click **Save**.
115+
Step 13 – On the Schedules page, click **Save**.
112116
The schedule is displayed under **Membership Life Cycle**. See the
113117
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic
114118
for additional information.

docs/directorymanager/11.1/admincenter/schedule/orphangroupupdate.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -93,9 +93,13 @@ the schedule in the identity store. See step 12 in the
9393
[Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule)
9494
topic for additional information.
9595

96+
:::important Password Re-insertion Required
97+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
98+
:::
99+
96100
Step 12 – On the Create Schedule page, click **Create Schedule**.
97101

98-
Step 13 – On the Schedules page, click **Save**.
102+
Step 13 – On the Schedules page, click **Save**.
99103
The schedule is displayed under Orphan Group Update. See the
100104
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic
101105
for additional information.

docs/directorymanager/11.1/admincenter/schedule/reports.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ settings here, such as the container and filter settings.
9090

9191
4. Select the check box for a report and click **Add**. The selected reports are displayed in the
9292
Reports area on the Create Schedule page. When this Reports schedule runs, it auto generates all
93-
added reports.
93+
added reports.
9494
To remove a report , click **Remove** for it.
9595

9696
Step 9 – Click **Add Triggers** in the Triggers area to specify a triggering criterion for the
@@ -103,6 +103,10 @@ running the schedule in the identity store. Follow step 12 in the
103103
[Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule)
104104
topic for additional information.
105105

106+
:::important Password Re-insertion Required
107+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
108+
:::
109+
106110
Step 11 – To set up notifications for the schedule, click **Notifications**.
107111

108112
1. On the Notifications dialog box, enter the email address of recipient(s) to whom you want to send
@@ -111,7 +115,7 @@ Step 11 – To set up notifications for the schedule, click **Notifications**.
111115

112116
Step 12 – On the Create Schedule page, click **Create Schedule**.
113117

114-
Step 13 – On the Schedules page, click **Save**.
118+
Step 13 – On the Schedules page, click **Save**.
115119
The schedule is displayed under **Reports**. See the
116120
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store)topic
117121
for details.

docs/directorymanager/11.1/admincenter/schedule/smartgroupupdate.md

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -81,14 +81,14 @@ processes the added groups only (i.e., it does not process nested groups).
8181
- Select the **Include Sub-Containers** check box to include the sub-containers within the
8282
selected container to search for the group(s).
8383
- Enter a search string in the search box; group names starting with the string are displayed as
84-
you type. Click **Add** for a group to select it.
84+
you type. Click **Add** for a group to select it.
8585
You can also perform an advanced search to locate a group. Click **Advanced** in the search
8686
box and use the search fields to enter a search string. On clicking **Search**, groups
8787
matching the string are displayed. Select the group you want to add as target.
8888
- After selecting one or more groups, click **Add** the groups are displayed in the Target(s)
8989
area.
9090

91-
3. To remove a container or group in the Target(s) area, click **Remove** for it.
91+
3. To remove a container or group in the Target(s) area, click **Remove** for it.
9292
To remove all target objects, click **Remove All**.
9393

9494
Step 10 – Click **Add Triggers** in the Triggers area to specify a triggering criterion for the
@@ -101,6 +101,10 @@ the schedule in the identity store. Follow step 12 in the
101101
[Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule)
102102
topic for additional information.
103103

104+
:::important Password Re-insertion Required
105+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
106+
:::
107+
104108
Step 12 – To enable notifications for the schedule, click **Notifications**. On the Notifications
105109
dialog box, specify an event for triggering notifications for the schedule and add recipients.
106110

@@ -118,7 +122,7 @@ dialog box, specify an event for triggering notifications for the schedule and a
118122

119123
3. Select the **Send Report to group owner(s)** check box to send a report to each unique group
120124
owner of the groups processed by the schedule. A Dynasty owner receives a notification for its
121-
groups and direct child Dynasties.
125+
groups and direct child Dynasties.
122126
Group owners include the primary owner, additional owner(s), and Exchange additional owner(s).
123127

124128
:::note
@@ -152,7 +156,7 @@ dialog box, specify an event for triggering notifications for the schedule and a
152156

153157
Step 13 – On the Create Schedule page, click **Create Schedule**.
154158

155-
Step 14 – On the Schedules page, click **Save**.
159+
Step 14 – On the Schedules page, click **Save**.
156160
The schedule is displayed under Smart Group Update. See the
157161
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic
158162
for more info for additional information.

docs/directorymanager/11.1/admincenter/schedule/synchronize.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -58,8 +58,8 @@ Step 8 – Add a Synchronize job or a job collection or both to this schedule.
5858
collections from the list and click **Add**.
5959

6060
The selected job(s) and job collection(s) are listed in the Target(s) area. They will be executed
61-
when the schedule runs.
62-
To remove a job or job collection in the Target(s)area, click **Remove** for it.
61+
when the schedule runs.
62+
To remove a job or job collection in the Target(s)area, click **Remove** for it.
6363
To remove all target objects, click **Remove All**.
6464

6565
Step 9 – Click **Add Triggers** in the Triggers area to specify a triggering criterion for the
@@ -72,9 +72,13 @@ the schedule in the identity store. Follow step 12 in the
7272
[Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule)
7373
topic for additional information.
7474

75+
:::important Password Re-insertion Required
76+
Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product.
77+
:::
78+
7579
Step 11 – On the Create Schedule page, click **Create Schedule**.
7680

77-
Step 12 – On the Schedules page, click **Save**.
81+
Step 12 – On the Schedules page, click **Save**.
7882
The schedule is displayed under **Synchronize**. See the
7983
[View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic
8084
for additional information.

0 commit comments

Comments
 (0)