ACS 5.2 and External Identity AD User

[marian_15]

Hi,

We are using ACS 5.2 and we are trying to create a Microsoft Active Directory (AD) Identity Store. We have a user to be used in the Active Directory creation General page and we would like to know how the test communication / ACS to AD communication takes place.

Our user is a predefined user in AD and has admin rights, but the password expires every 60 days. Will this affect the communication between AD and ACS 5.2 at everytime the entered user's password expires? Do we always have to change the password in the External Identity store everytime the password expires?

Marian

[Nicolas Darchis]

Yes, if the ACS admin user password expires, you're killing the ACS-AD communication. The doc says that the ACS password should never expire, otherwise you have to remodify it constantly.

[marian_15]

Thanks for this Nicolas!