Jump to content
Sign in to follow this  

SSPR - Keep AD Email Addresses in Sync for Verfication Methods

Recommended Posts

We have a scenario where most of our users (90%, i.e thousands ) using the password reset portal are using personal email accounts i.e gmail.

Email changes occur quite frequently at the moment, and they are all using the email temp PIN policy.

We notice this behavior:

  1. User has email address in AD

  2. User auto enrols into Temp PIN policy

  3. User Email changes in AD

  4. Windows service runs

  5. Users new email updates and changes in password state “Account Details”

  6. Users new email does not update in “verification methods”


Is it possible to have a feature (maybe a tick box) that allows for the AD email fields to keep in sync with the verification method email address?
This logic does may not work for standard office users if we wanted to expand it to them later on i.e. who have domain accounts.

If it could be filtered to a security group that would be good.




Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Create New...