diff --git a/docs/directorymanager/11.1/admincenter/datasource/manage.md b/docs/directorymanager/11.1/admincenter/datasource/manage.md index 535f7a5856..c1a92fd0e3 100644 --- a/docs/directorymanager/11.1/admincenter/datasource/manage.md +++ b/docs/directorymanager/11.1/admincenter/datasource/manage.md @@ -28,6 +28,10 @@ string in their names are displayed. You can update the details provided for a data source, such as its display name, the service account credentials to connect to it, and any other info you provided while creating it. +:::important Password Re-insertion Required +Due to security enhancements, when updating a data source, you must re-enter the **Service Account Password** even if you are not changing it. This is a required security measure to ensure password field sanitization across the product. +::: + Follow the steps to update the details for a data source. Step 1 – In Admin Center, click **Data Sources** in the left pane. diff --git a/docs/directorymanager/11.1/admincenter/schedule/grouplifecycle.md b/docs/directorymanager/11.1/admincenter/schedule/grouplifecycle.md index 078c395623..bfdc221f08 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/grouplifecycle.md +++ b/docs/directorymanager/11.1/admincenter/schedule/grouplifecycle.md @@ -34,7 +34,7 @@ Step 2 – On the Identity Stores page, click the ellipsis button for an identit Step 3 – Click **Schedules** under Settings in the left pane. -Step 4 – On the Schedules page, click **Add Schedule** and select **Group Life Cycle Job**. +Step 4 – On the Schedules page, click **Add Schedule** and select **Group Life Cycle Job**. The Create Schedule page is displayed. Step 5 – In the Schedule Name box, enter a name for the schedule. @@ -90,6 +90,10 @@ the schedule in the identity store. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 12 – To set notifications for the schedule, click **Notifications**. 1. On the Notifications dialog box, select the **Send group life extension notification** check box @@ -102,7 +106,7 @@ Step 12 – To set notifications for the schedule, click **Notifications**. Step 13 – On the Create Schedule page, click **Create Schedule**. -Step 14 – On the Schedules page, click **Save**. +Step 14 – On the Schedules page, click **Save**. The schedule is displayed under Group Life Cycle. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/groupusageservice.md b/docs/directorymanager/11.1/admincenter/schedule/groupusageservice.md index db7a1ce895..8efbbfc705 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/groupusageservice.md +++ b/docs/directorymanager/11.1/admincenter/schedule/groupusageservice.md @@ -30,7 +30,7 @@ Step 2 – On the Identity Stores page, click the ellipsis button for an identit Step 3 – Click **Schedules** under Settings in the left pane. -Step 4 – On the Schedules page, click **Add Schedule** and select **Group Usage Service Job**. +Step 4 – On the Schedules page, click **Add Schedule** and select **Group Usage Service Job**. The Create Schedule page is displayed. Step 5 – In the **Schedule Name** box, enter a name for the schedule. @@ -66,13 +66,13 @@ Step 9 – You can specify containers as targets for the schedule. The schedule groups in those containers and sub-containers. - Select the **Include all containers** check box to run the schedule on all the containers in the - identity store. + identity store. Or - Click **Add Container** to add one or more containers as targets. The Add Container(s) dialog box shows the domain name and the OUs in the identity store. Select the check boxes for the required containers and click **Add**; the selected containers are displayed in the Target(s) area. To exclude a sub-container, clear the check box for it on the Add Container(s) dialog box. -- To remove a container in the Target(s) area, click **Remove** for it. +- To remove a container in the Target(s) area, click **Remove** for it. To remove all target objects, click **Remove All**. Step 10 – You can also specify one or more messaging servers. The job reads expansion logs from @@ -98,13 +98,13 @@ Step 12 – After specifying the settings for triggers, click **Add**. The trigg Triggers area. A schedule can have one or more triggers, allowing the schedule to be started in many ways. With -multiple triggers, the schedule will start when any of the triggers occur. +multiple triggers, the schedule will start when any of the triggers occur. To enable or disable a trigger - Click **Edit** for a trigger in the Triggers area and use the -toggle button at the top of the Update Trigger dialog box to enable or disable the trigger. +toggle button at the top of the Update Trigger dialog box to enable or disable the trigger. To remove a trigger - Click **Remove** for a trigger to remove it. Step 13 – Click **Add Authentication** in the Authentication area to specify an account for running -the schedule in the identity store. +the schedule in the identity store. The Authentication dialog box displays your accounts in the respective identity store that you have used for signing in. Select an account to authenticate with it or click **Login with a different user** to provide the credentials of another account to run the schedule in the identity store. @@ -114,6 +114,9 @@ Make sure this account falls under a high priority security role that has elevat in the identity store (for example, Administrator). ::: +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: :::note If you are creating this schedule in a Microsoft Entra ID identity store, you can only specify @@ -125,7 +128,7 @@ section of the [Schedules](/docs/directorymanager/11.1/admincenter/schedule/over Step 14 – On the Create Schedule page, click **Create Schedule**. -Step 15 – On the Schedules page, click **Save**. +Step 15 – On the Schedules page, click **Save**. The schedule is displayed under Group Usage Service. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/manage.md b/docs/directorymanager/11.1/admincenter/schedule/manage.md index 073993abed..c2fe5792aa 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/manage.md +++ b/docs/directorymanager/11.1/admincenter/schedule/manage.md @@ -21,7 +21,7 @@ Step 2 – On the Identity Stores page, click the ellipsis button for an identit Step 3 – Click **Schedules** under Settings in the left pane. Step 4 – On the Schedules page, click the plus sign next to a job name to view the schedules defined -for it. +for it. The following is displayed for a schedule: | Label | Description | @@ -90,7 +90,7 @@ Step 3 – Click **Schedules** under Settings in the left pane. Step 4 – On the Schedules page, click the plus sign for a job to view the schedules defined for it. -Step 5 – Use the Enable toggle button for a schedule to enable or disable it. +Step 5 – Use the Enable toggle button for a schedule to enable or disable it. A disabled schedule is not executed in the identity store. Step 6 – Click **Save**. @@ -124,6 +124,14 @@ Step 7 – Click **Update Schedule**. Step 8 – Click **Save** on the Schedules page. +:::important Password Re-insertion Required +Due to security enhancements, when editing any schedule settings, you must re-enter the account password in the Authentication section even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. The password must be re-entered when: +- Updating triggers +- Updating targets +- Updating notification settings +- Making any other changes to the schedule +::: + ## Update Targets for a Schedule Targets in a schedule are the objects processed by that schedule. @@ -142,7 +150,7 @@ Step 4 – On the Schedules page, click the plus sign for a job to view the sche Step 5 – Click the ellipsis button for a schedule and select **Edit**. Step 6 – On the Edit Schedule page, the Target(s) area displays the target objects for the -schedule. +schedule. Target types differ for different schedule types. For example, you can set containers as targets for a Group Lifecycle schedule; and jobs and job collections for a Synchronize schedule. Other schedules, such as a User Lifecycle schedule, may not require a target, as they execute certain @@ -172,11 +180,11 @@ Step 4 – On the Schedules page, click the plus sign for a job to view the sche Step 5 – Click the ellipsis button for a schedule and select **Edit**. Step 6 – On the Edit Schedule page, click the **Notifications** button to update notification -settings for the schedule. +settings for the schedule. Notification settings differ for different schedule types. For example, a Smart Group Update schedule has a different set of notification options from a Group Lifecycle schedule. Other schedules, such as the Directory Manager Entitlement and Workflow Acceleration schedules, do not -have notification settings. +have notification settings. To manage the notification settings for a schedule, refer to the instructions for the respective schedule. @@ -232,7 +240,7 @@ Step 3 – Click **Schedules** under Settings in the left pane. Step 4 – On the Schedules page, click the plus sign for a job to view the schedules defined for it. -Step 5 – Click the ellipsis button for a schedule and select **Delete**. +Step 5 – Click the ellipsis button for a schedule and select **Delete**. The Delete option is not available for system-defined schedules. Step 6 – On the Delete Schedule dialog box, click **Delete**. diff --git a/docs/directorymanager/11.1/admincenter/schedule/managedbylifecycle.md b/docs/directorymanager/11.1/admincenter/schedule/managedbylifecycle.md index 25ed3b8b31..d95379a653 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/managedbylifecycle.md +++ b/docs/directorymanager/11.1/admincenter/schedule/managedbylifecycle.md @@ -83,9 +83,13 @@ the schedule in the identity store. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 12 – On the Create Schedule page, click **Create Schedule**. -Step 13 – On the Schedules page, click **Save**. +Step 13 – On the Schedules page, click **Save**. The schedule is displayed under Managed By Life Cycle. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/membershiplifecycle.md b/docs/directorymanager/11.1/admincenter/schedule/membershiplifecycle.md index 3448cb12f3..0c3142b4b7 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/membershiplifecycle.md +++ b/docs/directorymanager/11.1/admincenter/schedule/membershiplifecycle.md @@ -106,9 +106,13 @@ the schedule in the identity store. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 12 – On the Create Schedule page, click **Create Schedule**. -Step 13 – On the Schedules page, click **Save**. +Step 13 – On the Schedules page, click **Save**. The schedule is displayed under **Membership Life Cycle**. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/orphangroupupdate.md b/docs/directorymanager/11.1/admincenter/schedule/orphangroupupdate.md index 0674709a65..08e7813cbf 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/orphangroupupdate.md +++ b/docs/directorymanager/11.1/admincenter/schedule/orphangroupupdate.md @@ -93,9 +93,13 @@ the schedule in the identity store. See step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 12 – On the Create Schedule page, click **Create Schedule**. -Step 13 – On the Schedules page, click **Save**. +Step 13 – On the Schedules page, click **Save**. The schedule is displayed under Orphan Group Update. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/reports.md b/docs/directorymanager/11.1/admincenter/schedule/reports.md index 2471fd2c24..ae4a90dcd4 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/reports.md +++ b/docs/directorymanager/11.1/admincenter/schedule/reports.md @@ -90,7 +90,7 @@ settings here, such as the container and filter settings. 4. Select the check box for a report and click **Add**. The selected reports are displayed in the Reports area on the Create Schedule page. When this Reports schedule runs, it auto generates all - added reports. + added reports. To remove a report , click **Remove** for it. Step 9 – Click **Add Triggers** in the Triggers area to specify a triggering criterion for the @@ -103,6 +103,10 @@ running the schedule in the identity store. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 11 – To set up notifications for the schedule, click **Notifications**. 1. On the Notifications dialog box, enter the email address of recipient(s) to whom you want to send @@ -111,7 +115,7 @@ Step 11 – To set up notifications for the schedule, click **Notifications**. Step 12 – On the Create Schedule page, click **Create Schedule**. -Step 13 – On the Schedules page, click **Save**. +Step 13 – On the Schedules page, click **Save**. The schedule is displayed under **Reports**. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store)topic for details. diff --git a/docs/directorymanager/11.1/admincenter/schedule/smartgroupupdate.md b/docs/directorymanager/11.1/admincenter/schedule/smartgroupupdate.md index c522104436..08b1a67c78 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/smartgroupupdate.md +++ b/docs/directorymanager/11.1/admincenter/schedule/smartgroupupdate.md @@ -81,14 +81,14 @@ processes the added groups only (i.e., it does not process nested groups). - Select the **Include Sub-Containers** check box to include the sub-containers within the selected container to search for the group(s). - Enter a search string in the search box; group names starting with the string are displayed as - you type. Click **Add** for a group to select it. + you type. Click **Add** for a group to select it. You can also perform an advanced search to locate a group. Click **Advanced** in the search box and use the search fields to enter a search string. On clicking **Search**, groups matching the string are displayed. Select the group you want to add as target. - After selecting one or more groups, click **Add** the groups are displayed in the Target(s) area. -3. To remove a container or group in the Target(s) area, click **Remove** for it. +3. To remove a container or group in the Target(s) area, click **Remove** for it. To remove all target objects, click **Remove All**. Step 10 – Click **Add Triggers** in the Triggers area to specify a triggering criterion for the @@ -101,6 +101,10 @@ the schedule in the identity store. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 12 – To enable notifications for the schedule, click **Notifications**. On the Notifications dialog box, specify an event for triggering notifications for the schedule and add recipients. @@ -118,7 +122,7 @@ dialog box, specify an event for triggering notifications for the schedule and a 3. Select the **Send Report to group owner(s)** check box to send a report to each unique group owner of the groups processed by the schedule. A Dynasty owner receives a notification for its - groups and direct child Dynasties. + groups and direct child Dynasties. Group owners include the primary owner, additional owner(s), and Exchange additional owner(s). :::note @@ -152,7 +156,7 @@ dialog box, specify an event for triggering notifications for the schedule and a Step 13 – On the Create Schedule page, click **Create Schedule**. -Step 14 – On the Schedules page, click **Save**. +Step 14 – On the Schedules page, click **Save**. The schedule is displayed under Smart Group Update. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for more info for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/synchronize.md b/docs/directorymanager/11.1/admincenter/schedule/synchronize.md index a12ad46b79..f5f112e1de 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/synchronize.md +++ b/docs/directorymanager/11.1/admincenter/schedule/synchronize.md @@ -58,8 +58,8 @@ Step 8 – Add a Synchronize job or a job collection or both to this schedule. collections from the list and click **Add**. The selected job(s) and job collection(s) are listed in the Target(s) area. They will be executed -when the schedule runs. -To remove a job or job collection in the Target(s)area, click **Remove** for it. +when the schedule runs. +To remove a job or job collection in the Target(s)area, click **Remove** for it. To remove all target objects, click **Remove All**. Step 9 – Click **Add Triggers** in the Triggers area to specify a triggering criterion for the @@ -72,9 +72,13 @@ the schedule in the identity store. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 11 – On the Create Schedule page, click **Create Schedule**. -Step 12 – On the Schedules page, click **Save**. +Step 12 – On the Schedules page, click **Save**. The schedule is displayed under **Synchronize**. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/userlifecycle.md b/docs/directorymanager/11.1/admincenter/schedule/userlifecycle.md index 26e79b386f..f33d8a6069 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/userlifecycle.md +++ b/docs/directorymanager/11.1/admincenter/schedule/userlifecycle.md @@ -67,9 +67,13 @@ the schedule in the identity store. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 11 – On the Create Schedule page, click **Create Schedule**. -Step 12 – On the Schedules page, click **Save**. +Step 12 – On the Schedules page, click **Save**. The schedule is displayed under **User Life Cycle**. See the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store)topic for additional information. diff --git a/docs/directorymanager/11.1/admincenter/schedule/workflowacceleration.md b/docs/directorymanager/11.1/admincenter/schedule/workflowacceleration.md index ea5d404d79..10077a59a1 100644 --- a/docs/directorymanager/11.1/admincenter/schedule/workflowacceleration.md +++ b/docs/directorymanager/11.1/admincenter/schedule/workflowacceleration.md @@ -69,9 +69,13 @@ To change it, click **Add Authentication**. Follow step 12 in the [Create a Group Usage Service Schedule](groupusageservice.md#create-a-group-usage-service-schedule) topic for additional information. +:::important Password Re-insertion Required +Due to security enhancements, when editing a schedule, you must re-enter the account password in the Authentication section, even if you are not changing the authentication credentials. This is a required security measure to ensure password field sanitization across the product. +::: + Step 9 – Click **Update Schedule**. -Step 10 – On the Schedules page, click **Save**. +Step 10 – On the Schedules page, click **Save**. For general schedule info, see the [View the Schedules in an Identity Store ](manage.md#view-the-schedules-in-an-identity-store) topic for additional information. diff --git a/docs/directorymanager/11.1/portal/passwordmanagement.md b/docs/directorymanager/11.1/portal/passwordmanagement.md index fe47c388a4..0c7bb2fb92 100644 --- a/docs/directorymanager/11.1/portal/passwordmanagement.md +++ b/docs/directorymanager/11.1/portal/passwordmanagement.md @@ -35,7 +35,7 @@ both these functions. Using it: The client software to install on user workstations is called [ Credential Provider](/docs/directorymanager/11.1/credentialprovider/credentialprovider.md) and available for distribution using various IT enabled distribution methods such as group policy and Microsoft System Center - Configuration Manager (SCCM). See the [Install Credential Provider](/docs/directorymanager/11.1/credentialprovider/installcp.md) topic for + Configuration Manager (SCCM). See the [Install Credential Provider](/docs/directorymanager/11.1/credentialprovider/installconfigurecp.md) topic for additional information. The distributed client enables the **Forgot Password?** and **Unlock Account** links on the diff --git a/docs/directorymanager/11.1/portal/synchronize/manage/job.md b/docs/directorymanager/11.1/portal/synchronize/manage/job.md index c1f4a9d88b..5d4b1c10b4 100644 --- a/docs/directorymanager/11.1/portal/synchronize/manage/job.md +++ b/docs/directorymanager/11.1/portal/synchronize/manage/job.md @@ -86,6 +86,15 @@ Step 2 – On the Synchronize portal, click **All Jobs**. Step 3 – In the jobs list, click the **three vertical dots** icon on the job that you want to edit and click **Edit**. +:::important Password Field Re-configuration Required +Due to security enhancements, if your Synchronize job uses password field mapping or password transformations, you must re-configure the password field when editing the job. This includes: +- Re-selecting the password field in the field mapping section +- Re-applying any password transformations +- Re-entering password complexity settings if using auto-generated passwords + +This is a required security measure to ensure password field sanitization across the product. +::: + Step 4 – Go through the wizard pages to modify the job as required. Step 5 – Click **Finish** twice to close both wizards.