Automated password generation and change
An identity management system detects the occurrence of a trigger event, such as a time period expiration, or an action on the identity management system. The identity management system accordingly generates a new password for an account of a user on a third-party service and causes the account of the user on the third-party service to use the new password. The identity management system can also detect a manual user change of a password for a third-party service and cause configuration of client devices of the user to reflect the new password.
1. A computer-implemented method, comprising:
learning heuristics to identify webpages of third-party services that request login information, wherein a user has an account on each third-party service;
selecting a third-party service from the third-party services;
identifying password complexity rules associated with the selected third-party service;
generating a random password that satisfies the password complexity rules as a new password for an account of the user on the selected third-party service;
causing the account of the user on the selected third-party service to use the new password, the causing comprising applying the learned heuristics to enter the new password into a webpage of the selected third-party service that requests login information;
configuring client devices of the user to be updated with the new password for use with the selected third-party service, the configuring comprising sending a request to a remote device management system to configure the client devices;
attempting to log the user in to the selected third-party service;
determining that the attempt failed; and
responsive to determining that the attempt failed, transmitting a notification of suspicious activity.
2. The computer-implemented method of claim 1 , further comprising identifying that a password for an account of the user on a third-party service has been changed within a web-based user interface on a client device of the user.
3. The computer-implemented method of claim 1 , further comprising receiving a notification of a change to a password for an account of the user on a third-party service from a remote agent that queries a user directory.
4. The computer-implemented method of claim 1 , further comprising providing client devices of the user with a browser plug-in that detects changes to passwords for accounts of the user on the third-party services within web-based user interfaces on client devices of the user.
5. The computer-implemented method of claim 4 , further comprising receiving a notification of a change to a password for an account of the user on a third-party service by the browser plug-in.
6. The computer-implemented method of claim 1 , further comprising generating new passwords for the accounts of the user on the third-party services responsive to detecting that a password for an account of the user on a third-party service is updated.
7. A computer-implemented method, comprising:
identifying client devices of a user, each client device including third-party applications for interfacing with third-party services;
detecting an occurrence of a trigger event; and
responsive to the detecting of the trigger event:
selecting a third-party service of the third-party services,
generating a new password for an account of the user on the selected third-party service,
causing a third-party application corresponding to the selected third-party service to use the new password for the account of the user on the selected third-party service, and
configuring the client devices to be updated with the new password for use with the third-party application, the configuring comprising sending a request to a remote device management system to configure the client devices.
8. The computer-implemented method of claim 7 , wherein the detecting comprises identifying that a password for an account of the user on a third-party service has been changed.
9. The computer-implemented method of claim 7 , wherein the detecting comprises receiving a notification of a change to a password for an account of the user on a third-party service from a remote agent that queries a user directory.
10. The computer-implemented method of claim 7 , further comprising providing the client devices of the user with a browser plug-in that detects changes to passwords for accounts of the user on the third-party services within web-based user interfaces provided by the third-party applications, wherein the detecting comprises receiving a notification of a change to a password for an account of the user on a third-party service by the browser plug-in.
11. The computer-implemented method of claim 7 , wherein the configuring comprises sending a request to a remote device management system to configure the client devices.
12. The computer-implemented method of claim 7 , further comprising generating new passwords for use with the third-party applications responsive to detecting that a password for an account of a user on a third-party service is updated.
13. A non-transitory computer-readable storage medium storing instructions that when executed by a computer processor perform actions comprising:
learning heuristics to identify webpages of third-party services that request login information, wherein a user has an account on each third-party service;
selecting a third-party service from the third-party services;
identifying password complexity rules associated with the selected third-party service;
generating a random password that satisfies the password complexity rules as a new password for an account of the user on the selected third-party service;
causing the account of the user on the selected third-party service to use the new password, the causing comprising applying the learned heuristics to enter the new password into a webpage of the selected third-party service that requests login information;
configuring client devices of the user to be updated with the new password for use with the selected third-party service, the configuring comprising sending a request to a remote device management system to configure the client devices;
attempting to log the user in to the selected third-party service;
determining that the attempt failed; and
responsive to determining that the attempt failed, transmitting a notification of suspicious activity.
14. The non-transitory computer-readable storage medium of claim 13 , the instructions further comprising identifying that a password for an account of the user on a third-party service has been changed within a web-based user interface on a client device of the user.
15. The non-transitory computer-readable storage medium of claim 13 , the actions further comprising receiving a notification of a change to a password for an account of the user on a third-party service from a remote agent that queries a user directory.
16. The non-transitory computer-readable storage medium of claim 13 , the actions further comprising providing client devices of the user with a browser plug-in that detects changes to passwords for accounts of the user on the third-party services within web-based user interfaces on client devices of the user.
17. The non-transitory computer-readable storage medium of claim 16 , the actions further comprising receiving a notification of a change to a password for an account of the user on a third-party service by the browser plug-in.
18. The non-transitory computer-readable storage medium of claim 13 , the actions further comprising generating new passwords for the accounts of the user on the third-party services responsive to detecting that a password for an account of the user on a third-party service is updated.