Create and manage password generators
Password generation
Build default passwords for account provisioning from configurable random values and, when appropriate, selected identity data.
Password generators create one or more outputs that can be used in mappings. Each output is made of up to three parts, joined from left to right.
Understand password partsDirect link to Understand password parts
| Part type | Use it for |
|---|---|
| Random | A value that follows configured length and character rules. |
| Column | A value from the selected filter, with optional text conversions. |
| Empty | A disabled part that is not included in the output. |
Avoid placing predictable identity data in passwords unless your organization's security policy explicitly allows it. Prefer random values and deliver initial credentials through an approved secure process.
Create a password generatorDirect link to Create a password generator
Create the objectDirect link to Create the object
- Go to Processing > Password Generation and select Add.
- Enter a descriptive Generator Name and select Create.
- Select Part 1 in the first row of the Passwords pane to open its random configuration.
Set random requirementsDirect link to Set random requirements
Enable or clear the available random-generator options and set their minimum and maximum lengths. Review the Example Value column as you make changes.
Add a second or third part only when the password policy calls for it.
Add a source-data partDirect link to Add a source-data part
- Select Use Filter and choose a filter when you need a column value in the password.
- Drag a column from the Columns pane to a password part.
- Select that part to apply the required text conversions, then check the preview.
Make the output availableDirect link to Make the output available
- Add another password row if the generator needs multiple outputs.
- Select Save.
- Select the password-generator output in the mapping that creates or updates the target account.
Outcome
The mapping can generate a password value when it runs.
Restrict a password by conditionDirect link to Restrict a password by condition
Use conditions when different populations need different password configurations—for example, when a particular department or account type follows a separate policy.
Select a source attributeDirect link to Select a source attribute
- Edit the password generator and select Use Condition.
- Select the filter attribute that decides which password applies, such as
organizational_unit.
Match passwords to the populationDirect link to Match passwords to the population
Enter a Condition value for each password row. NIM applies only passwords whose condition matches the selected source-attribute value.
Verify representative recordsDirect link to Verify representative records
Check the preview for records from each population to confirm the expected password is selected, then save the generator.
Edit, copy, rename, or remove a generatorDirect link to Edit, copy, rename, or remove a generator
- Go to Processing > Password Generation.
- Select Edit Password Generator to update its parts or conditions.
- Select Copy Object to create a duplicate with a numbered suffix, such as
_01. - Select Rename Object, enter the new name, and press Enter to confirm.
- Select Remove Password Generator and confirm to delete a generator that is no longer used.
Before removing a password generator, verify that no mappings still use its output.