Change Back-End Password

This operation requests OneSpan Authentication Server to change the user's static Active Directory password with a configured back-end OneSpan Authentication Server. To execute this operation, the changeBackendPassword SOAP command is sent to OneSpan Authentication Server. The changeBackendPassword command should, at a minimum, specify the following parameters:

• componentType. Indicates the client application component type.
• userID. The ID of the user who changes their password.
• staticPassword. The current static password.
• newStaticPassword. The new static password.

 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
  <soapenv:Header/>
  <soapenv:Body>
    <aut:changeBackendPassword xmlns:aut="http://www.vasco.com/IdentikeyServer/IdentikeyTypes/Authentication">
      <componentType>SOAP-LocalAuth</componentType>
      <user>
        <userID>user_pws</userID>
        <domain>MASTER</domain>
      </user>
      <credential>
        <staticPassword>Test1234</staticPassword>
      </credential>
      <newStaticPassword>newPass1</newStaticPassword>
    </aut:changeBackendPassword>
  </soapenv:Body>
</soapenv:Envelope>

If password randomization is enabled in OneSpan Authentication Server, the effective policy used by OneSpan Authentication Server must not apply password proxying for the changeBackendPassword SOAP command. Otherwise, this will lead to a user with a randomized password being able to change the password.