View when password last set

[Matt S]

Is there any way through GAM to see when a user's password was last set?

I'm trying to do something a bit tricky.  We use google cloud password sync and when I reset a user's network password (to 'changeme' or 'password' or whatever) it gets sync'd automatically through google cloud password sync to Google.  However, I want to force them to change their network password (which will then sync the new password to Google) before signing into their Google account.  So after resetting their network password, and then waiting for the temp password to sync to Google, I want to overwrite that password on Google, through GAM, to something random to prevent them from signing into Google and not changing their temporary network password.

I tested it briefly and it takes about 5 seconds to sync a password change to Google, so I'm currently just waiting 7 seconds in between my commands.  I'd like to programmatically check it though so A) I can be sure things are working, and B) speed it up when it doesn't take that 7 seconds.

thanks

[Matt S]

Bump.  I would think this data would be available as Google will tell you when your password was last changed.

I was thinking via gam info user <email address> [schemas <SchemaNameList>]

but I can't find a list of potential schema names.

[Jay Lee]

Last password change is not something the user APIs return. You could look at admin audit and see if there was an admin that changes the password but that doesn't cover user password changes, nothing logs on those.

Sorry, this simply isn't possible with GAM today due to no API existing for it.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/da613d26-9c85-49c0-a8ea-b49904b1b4f0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Jefferson Davis]

Was hunting through here hoping this was possible as the admin console user account report does not allow filtering by OU.

On Thursday, August 23, 2018 at 9:37:41 AM UTC-7, Jay Lee wrote:

Last password change is not something the user APIs return. You could look at admin audit and see if there was an admin that changes the password but that doesn't cover user password changes, nothing logs on those.

Sorry, this simply isn't possible with GAM today due to no API existing for it.

On Thu, Aug 23, 2018 at 12:31 PM Matt S <synt...@gmail.com> wrote:

Bump.  I would think this data would be available as Google will tell you when your password was last changed.

I was thinking via gam info user <email address> [schemas <SchemaNameList>]

but I can't find a list of potential schema names.

On Monday, August 20, 2018 at 4:53:10 PM UTC-4, Matt S wrote:

Is there any way through GAM to see when a user's password was last set?

I'm trying to do something a bit tricky.  We use google cloud password sync and when I reset a user's network password (to 'changeme' or 'password' or whatever) it gets sync'd automatically through google cloud password sync to Google.  However, I want to force them to change their network password (which will then sync the new password to Google) before signing into their Google account.  So after resetting their network password, and then waiting for the temp password to sync to Google, I want to overwrite that password on Google, through GAM, to something random to prevent them from signing into Google and not changing their temporary network password.

I tested it briefly and it takes about 5 seconds to sync a password change to Google, so I'm currently just waiting 7 seconds in between my commands.  I'd like to programmatically check it though so A) I can be sure things are working, and B) speed it up when it doesn't take that 7 seconds.

thanks

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.