Generate password for ADSAccount

Which version are you using? Any hotfixes installed?

OneIM 8.1. Hotfixes didn't installed,

Please contact support. You may be affected by VPR#31335. I assume you provided an objectkey while calling the script? For AD you need to have the ADSAccount provided as an entity as documented in the script sample.

We are using the following script:

Public Function Z_Generate_Password_AD(ByVal accountXobjectKey  As String) As String
Dim entity As IEntity = Session.Source().Get(New DbObjectKey(accountXObjectKey))
Dim pwd As String = TSB_GetPassword(entity, "UserPassword", "ADS", "", True)
Return pwd
End Function

and it works fine (but you must have TargetSystem\ADS\Accounts\InitialRandomPassword=1 configation parameter)

Ran into the same Problem.

Make sure that your 1IM password policy matches or is stricter than the ADS_Domains Policy. Sadly there the Password Policy "check Password" Function the the designer doesn't check against the domain the script will do that and you will see the ADS_PWDValidate Skript loop to death.

You should conside to implement a process to update the 1IM Passwordpolicy from the domain, or if you have multiple domains with different policies automaticly create/update a policy for each domain.