Inside Activate
Password Reset
Activate Password Generation
8 min
the activate password generation configuration defines how automatically generated passwords are created when accounts are provisioned or reset all generated passwords must comply with the active directory (ad) or entra id domain password policy to ensure compliance with corporate security requirements configuration path //resources/configuration/passwords/defaultrules this parameter controls the default behaviour for password creation across all workflows that use automatic password generation overview activate supports two password generation modes keyword – builds a password using a random dictionary keyword, followed by numbers or symbols to meet the specified length random – creates a password using a completely random sequence of characters, including uppercase, lowercase, numeric, and special characters the password generator can optionally apply a prefix to all generated passwords — useful for identifying system generated credentials or enforcing a pattern prefix required by policy example configuration \<passwords> \<type>keyword\</type> \<! options keyword, random > \<prefix>a!\</prefix> \<! optional prefix > \<length>10\</length> \<! total password length > \</passwords> explanation true 330,331left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type password types keyword generates a password by selecting a random keyword, then appending random digits and symbols until the required length is reached this option produces passwords that are easier to remember while still meeting ad policy requirements example output a!forest92 random creates a password from a fully randomised character set, maximising entropy and security this is ideal for service accounts or automated provisioning where memorability is not required character set used abcdefghijklmnopqrstuvwxyz abcdefghijklmnopqrstuvwxyz 1234567890 !@#$ ;+ &^% example output a!qp7#tfd8 best practices always confirm the generated passwords comply with your active directory password policy , including complexity, history, and expiration rules avoid prefixes that could inadvertently expose password origin or system association test password generation after any configuration change to ensure compliance and usability use keyword mode for user accounts (more readable) and random mode for system or service accounts (more secure) abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuzwxyz1234567890!@#$ ;+ &^%