Password Synchronization
The purpose of Password Synchronization is to simplify administration of the Single Sign-On (SSO) credential database, and to keep passwords in sync across user directories. You can accomplish these two tasks by using password synchronization adapters. The topics in this section describe the command-line utility for creating and managing those adapters.
There are three types of password synchronization sub-features.
The first type is Windows to External (for example, Active Directory to RACF). In this scenario, a Windows user's password change is captured and sent to the Enterprise SSO server that is assigned to receive password changes from domain controllers. This server then forwards the password change to an external system, and the mapping in the SSO credential database is kept in sync with the change made on the external system.
The second type is External to Windows - Full synchronization. In this scenario, a password is captured on the External system and sent to the Enterprise Single Sign-On server that is assigned for Password Synchronization. It then updates the password in the SSO credential database, and also updates the Windows user's password in Active Directory.
The third type is External to Windows - Partial synchronization. In this scenario, a password is captured on the External system and sent to the Enterprise Single Sign-On server that is assigned for Password Synchronization. It then updates the password in the SSO credential database.