vibeskmfk.blogg.se - Microsoft account password change notification

Password Sync has a DLL named "password_sync_dll.dll" installed as an LSA Notification Package.

The only way to read passwords is to capture them when they’re set or changed. Therefore, conventional synchronization methods (for example, Google Cloud Directory Sync) can't access them. They can't be read through any interface, such as LDAP.

In Active Directory, passwords are stored as write-only.

The user can then sign in to their Google Account using their Active Directory password.

Additionally, for Google Workspace APIs to work correctly you need to open several ports and add some host names to your allowlist.

The service updates your Google Account using the Directory API.

The service gets the email address for the user from Active Directory using LDAP.

The service receives the hashed password and the username from the DLL.

The Password Sync Dynamic Link Library (DLL) is called by Microsoft Windows on that DC with the new password and username.

When a user's password is changed, the update request is sent to a domain controller (DC).

How it worksĪfter Password Sync is installed and configured, it sends updated passwords to your Google Account each time an Active Directory user changes their password. Password Sync is available to Google Workspace and Cloud Identity administrators. Password Sync can be used to update your users' Google Workspace and Cloud Identity passwords directly from Microsoft Active Directory.