Solved: Password Reset With Active Directory - Page 7 - ServiceNow Community

Has anybody gotten password reset to work with Active Directory? I can not find any information on the Wiki on setting it up with active directory. Do I need to modify the workflow that comes with the plugin? I have a MID servers setup and connected.

10,706 Views

1 ACCEPTED SOLUTION

Found the issue. If anybody needs to do multiple domains this is what you will need to add to the Pwd Reset - AD in the Run Script at the beginning of the workflow. You will need to also add this code to the Pwd Unlock Account - AD workflow. Also for your credential store you will put for the host name [your domain controller]:3268. This will make sure you use the global catalog service. This should be your root domain controller.

In the below script replace the ? what shows on the source for the user in each domain.

var user = new GlideRecord('sys_user');

user.addQuery ('user_name', workflow.inputs.u_user_name);

user.query();

if (user.next()){

if (user.source.toLowerCase().indexOf('dc=?,dc=?,dc=?') > -1){

workflow.scratchpad.domain = '[your domain controller]';

}

else if (user.source.toLowerCase().indexOf('dc=?,dc=?,dc=?') > -1){

workflow.scratchpad.domain = '[your domain controller]';

}

else if (user.source.toLowerCase().indexOf('dc=?,dc=?,dc=?') > -1){

workflow.scratchpad.domain = '[your domain controller]';

}

else if (user.source.toLowerCase().indexOf('dc=?,dc=?,dc=?') > -1){

workflow.scratchpad.domain = '[your domain controller]';

}

else if (user.source.toLowerCase().indexOf('dc=?,dc=?,dc=?') > -1){

workflow.scratchpad.domain = '[your domain controller]';

}

else if (user.source.toLowerCase().indexOf('dc=?,dc=?') > -1){

workflow.scratchpad.domain = '[your domain controller]';

}

View solution in original post

37 REPLIES 37

Thanks Brian , this information helped.

did you solve it? i have exactly the same issue and cant find that anyone solved it. I have every plugin turned on. it just gives me the lock state error.

We are testing our password reset, We have 2 separate LDAP's that need to manage with 2 different credential store's. We hit a snag yesterday because the reset keeps bouncing against the default mid-server. Is there any way to make password reset hit the appropriate mid-server that uses the appropriate credential store. Kindly suggest,

Rohith Sabbineni.

I assume you have two AD forests. Were you able to solve the issue? if so, what was the fix?

Question: Are these 2 separate domains or are they in a domain forest (Root domain and child domains)?