Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-9933: Why do the logs show "invalid password" when Provisioning/Syncing G Suite accounts?

App Access Service ,   App Gateway Service ,  

18 May,18 at 03:54 PM

Question: 

Why do the logs show "invalid password" when Provisioning/Syncing G Suite accounts?


Answer:

This error is likely due to a mismatch of password policies between Active Directory (set in Group Policy Management Editor) and G Suite.  For example: IF AD requires a 6 minimum character password, but G Suite requires 8.  In this case, a user could have a valid 6 or 7 character AD password, but the password will fail to sync to G Suite with the error "Invalid password" as it does not meet the G Suite length requirement.

To view the AD password Policy:

1.  Open Group Policy Management Editor
2.  Locate the policy used for Password Rules (Generally Default Domain Policy)
3.  Look in Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Account Policies -> Password Policy

User-added image

To view the G Suite Password Policy:

https://support.google.com/a/answer/139399?hl=en

To resolve, make sure that the Active Directory password requirements are equal to or exceed the length/complexity requirements for G Suite.
 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.