Password Synchronizer

Multi-Platform Password Synchronizer feature of ADSelfService Plus automatically synchronizes Windows Active Directory password resets/changes and account unlocks of a user account across multiple other platforms. This offers users the comfort of maintaining a single password across all systems.

ADSelfService Plus supports a wide range of cloud-based and on-premise applications for password synchronization with Windows Active Directory. The list includes:

  1. Google Apps

  2. Office 365 / Azure

  3. Salesforce

  4. Zoho

  5. Zendesk

  6. Microsoft Dynamics CRM

  7. IBM i/AS400 system

  8. HP UX Directory Server

  9. Oracle E-business Suite

  10. Oracle Database

  11. AD LDS

  12. OpenLDAP

  13. Active Directory

  14. ServiceNow

Account Linking:
Accounts in Active Directory must be linked with the corresponding accounts in other providers for password synchronization to work. Account linking can be done either manually by the end user or can be automated.


To manually link accounts, end users need to log in to the self-service portal, go to the Link Accounts tab, and then enter their credentials of the provider with which they want to link their AD account.


AD accounts are automatically linked with other providers based on one or more of AD attribute value(s) as selected by you.


Follow the steps given below to configure account linking:

  1. Navigate to Configuration --> Self-service --> Password Synchronizer

  2. Click Account Linking

  3. Select a provider from the drop down menu

  4. Select a System or Domain

  5. Now Enable or Disable the Auto Account Linking option. If disabled, users have to manually link their accounts by logging in to the self-service portal.

  6. If enabled, select the account attribute(s) in AD, whose value will be compared with the accounts in the selected provider.

  7. If you have selected more than one attribute, the AD Account Format will show you the final value that will be used to link accounts.

Note: If the value of the attributes in AD Account Format is null, then sAMAccountName value will be used by default to automatically link accounts.

Synchronize Native Password Changes in Windows Active Directory: To synchronize native password changes in Windows Active Directory, you need to install the password sync agent that comes bundled with ADSelfService Plus. The Password Sync Agent, when installed on a Primary Domain Controller (PDC), intercepts the native password change (e.g.: password change via Ctrl+Alt+Del screen or password reset by admins in ADUC console), encrypts the new password, and automatically synchronizes them with the above mentioned systems and applications.

To learn more about the Password Sync Agent and how to install it, please click here.

Copyright © 2019, ZOHO Corp. All Rights Reserved.