Password Callouts

Password Callouts refers to the ability to invoke external REST services during password updates to handle things such as password strength checking and reverse password synchronisation.

A REST callout can be configured before the password is updated by Verify Access and/or after the password has been updated by Verify Access.

• Password Update Flow
  The password update flow is depicted in the following diagram.
• Authentication to the REST services
  There are two different methods which can be used to handle authentication to the REST services.
• User Search Operation
  The User Search callout provides the ability to map the IBM Security Verify Access user name which is contained in the password update request into a user identity which is known to the configured pre and post password update REST services.
• Pre-Password Update Callout
  The pre-password update callout is invoked just prior to updating the password within IBM Security Verify Access.
• Post-Password Update Callout
  The post-password update callout will be invoked immediately after a successful password update in IBM Security Verify Access. 

Parent topic: Password processing

Related concepts

• Login failure policy ("three strikes" login policy)
• Password strength policy