Partager via

Custom Credential Provider for Password Reset

  • Article

The credential provider for Password Reset is fairly simply and straight forward. Since I have joined the team, there is very little code change in that area. Recently, we decided to fix some minor known bug in the credential provider (CP) and I realized I don't know too much about how CP works.

So I  downloaded the samples in Windows SDK and played with it. After some time, I came up with the following.

Notice the extra tile at logon screen

... and after you click on the tile.
 

Feel free to download the source code and play with it. The zip file contains x86 and x64 release builds.

 P.S. You have to click into this post to see the attachment.

WARNING: THIS CUSTOM CREDENTIAL PROVIDER IS NOT SUPPORTED AND IS PROVIDED AS IS WITHOUT ANY WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED.

CustomCP.zip

Comments

  • Anonymous
    January 01, 2003
    I want to hardcode PIN while smart logon. I read topic: stackoverflow.com/.../certificate-based-login I create instanse of struct KERB_CERTIFICATE_LOGON and then fill it  in ICredentialProviderCredential::GetSerialization method. What should I do next?

  • Anonymous
    January 01, 2003
    i haven't looked into that maybe, the GetSerialization() in the sample is for local logon only this might have some useful information http://msdn.microsoft.com/en-us/library/bb776026%28VS.85%29.aspx

  • Anonymous
    January 01, 2003
    This is really cool! I installed it on a W.2008 R2, and it runs perfectly! Congrats.

  • Anonymous
    January 01, 2003
    What are you trying to accomplish? This is just an illustration based on the Windows SDK on how to develop a Credential Provider

  • Anonymous
    January 01, 2003
    Have you tried this? support.microsoft.com/.../224816

  • Anonymous
    January 01, 2003
    I have a question which you may know the answer two. I downloaded the Credential Provider Sample from MS and was able to unlock on a computer with no DOMAIN but it failed on a computer on a DOMAIN. Should domain be passed in any special way along with the username (DOMAINusername did not seem to work) - or do the whole sample needs to be rewritten in order to support domain logon? Thanks!

  • Anonymous
    January 01, 2003
    This is FIM 2010 specific

  • Anonymous
    December 14, 2009
    Anthony, I would love to check out the code but I can't find the link.

  • Anonymous
    December 14, 2009
    Never mind I see it. Eyes too watery from my cold

  • Anonymous
    July 24, 2011
    I need a Credential Provider to open a web page that allows the user to reset their password. Any suggestions would be greatly appreciated.

  • Anonymous
    July 26, 2011
    I will give that a try. Thanks alot, there is not a lot of resources on Credential Provider, and your blog is very helpful :)

  • Anonymous
    September 05, 2012
    Thanks a million!

  • Anonymous
    November 20, 2012
    Hi, I can't found the GateFramework.dll. It's include in SDK or custom by your self? thanks :)

  • Anonymous
    November 20, 2012
    GateFramework.dll is part of Password Reset Client in Forefront Identity Manager 2010.

  • Anonymous
    May 24, 2013
    Will this work with Windows 7 Embedded?

  • Anonymous
    December 12, 2013
    Hi Anthony! I hava a question for you! This tool work only with FIM2010? I try to install into my PC and it's ok but when i try to reset my domain user password i recived this response: FAIL: LOADLIBRARY (GATE_FRAMEWORK_MODUL). Tks.

  • Anonymous
    January 27, 2014
    Hi Anthony,Does the source code can work with a link to a web application which i wrote using ASP.NET?Or is it works just with FIM2010?

  • Anonymous
    April 10, 2014
    Hi Anthony, can you tell me how to integrate the source code into the OS Logon screen? Any link would be appreciated.

  • Anonymous
    April 11, 2014
    Thank you for response. I am trying to add a button of "Forgot your password" on my OS logon screen and clicking on this button will lead to another application. Is installation of FIM is mandatory if i want to integrate a custom credential provider?

    Can you point me to a link which provides the steps to create a custom credential provider, register it and show its tile on OS logon screen? Windows 8.1, Vista and Windows 7 OS are in my scope.

  • Anonymous
    April 11, 2014
    Look at http://msdn.microsoft.com/en-us/library/windows/desktop/bb648647(v=vs.85).aspx
    There are much richer sample in the Windows SDK.

  • Anonymous
    September 30, 2014
    hi anthony, is there a way I can modify the password reset program to use my own libraries instead of using FIM 2010?

  • Anonymous
    September 30, 2014
    You can't modify the FIM Credential Provide to use your own library. You can definitely, however, to write your own Credential Provider to use your own libraries

  • Anonymous
    March 03, 2015
    Hi friend,
    It's nice man and thanks for this post. I need one doubt (i.e.) i need only tile creation on logon page and how to create. kindly update the source and send me : Kali2madu@gmail.com. Kindly do the needful.

  • Anonymous
    June 08, 2015
    Hi Anthony,

    Thank you for sharing. I, like a couple of others on here, are interested in launching a 3rd party Password Management application and not FIM. Can you provide any assistance in this scenario? Would you be willing to consult on a solution?

  • Anonymous
    June 08, 2015
    The comment has been removed

  • Anonymous
    July 22, 2015
    how to install it.?

  • Anonymous
    July 22, 2015
    See PasswordResetCredentialProviderRegister.reg

  • Anonymous
    July 30, 2015
    I have it launching my 3rd party app but I wish to bypass the login screen. I just want to click on the Image Tile and launch my app. Any help would be appreciated.

  • Anonymous
    July 30, 2015
    Nvm. I got it working. Thanks for the code.

  • Anonymous
    September 28, 2015
    Jody, will you share your code to bypass the login screen. Thanks