Password Synchronization Manager Overview

Password Synchronization Manager propagates password changes of Windows domain users with enabled (and not locked) Digipass support to the OneSpan Authentication Server environment. OneSpan Authentication Server uses static passwords for back-end authentication and for user authentication with Digipass Authentication for Windows Logon (DAWL).

Since it is impossible to retrieve the user password directly from Active Directory (AD), OneSpan Authentication Server keeps a(n) (encrypted) copy of the password itself. If the user password was changed in the Windows domain only, it would be different from the one kept by OneSpan Authentication Server (unsynchronized). Password Synchronization Manager circumvents this and is triggered on the domain controller whenever a password change is requested. It then propagates the password change to the OneSpan Authentication Server environment (password synchronization).

Password Synchronization Manager consists of two essential components:

• PSM Password Filter for Active Directory (AD)

• PSM Remote Configuration Manager

If not stated otherwise, Password Synchronization Manager and password filter are used synonymously.