B.3 Policies Required in the Subscriber Command Transformation Policy Set

The policies listed in the Password Synchronization Policy Name column must be present in the order listed. Also, they must be the last policies in the Subscriber Command Transformation policy set.

Table B-3 Policies Required in the Subscriber Command Transformation Policy Set

Location in the Driver Configuration

Password Synchronization Policy Name

What the Policy Does

Subscriber Command Transformation

Password(Sub)-Transform Distribution Password

Transforms the Universal password to a <password> element.

Password(Sub)-Default Password Policy

Adds a default password to an Add object if the Add object does not already contain a password.

This policy and the Password(Pub)-Default Password Policy are the only policies that you can modify or remove. For password synchronization functionality to work properly, the other policies should be used without changes,.

Password(Sub)-Check Password GCV

Checks the GCV to determine whether you have specified that the connected system accepts passwords. If not, it strips out all password elements.

The name of the GCV is enable-password-subscribe, and the display name is Application accepts passwords from Identity Manager data store.

Password(Sub)-Add Password Payload

Puts in password payload data that is passed around in the engine for purposes of e-mail notification.