Self Service Password Reset
I also installed a SSPR website that you can now use to manage your passwords on the domain. It does make you do those question things the first time you login, but that is so that if you forget your password someday you can reset it through answering those. There isn't much else to do there, but it is a neat thing that can help folks with password issues.
Once logged in, you will see this, where you can perform the listed actions. Aside from the obvious, the My Account is more like Nerd Details on My Account that I Really Don't Care About.
Initial SSPR login screen:
The account info screen will show you the password policies applied to your account, along with your history on the site, so those might be more than useless to you. The first page is full of irrelevant data.
This service is called pwm and is also dockerized. This thing uses jdbc database connectors, so I would up making an oracle DB container for it too. I'm just glad it actually works.
I added a link to my password generator website that appears when you ask to change your password too.
I found a TOTP setting in here too, so I went ahead and enabled that for password resets too.


