Active Directory/LDAP Reset Link Allows Wildcard Entries

In Authentication Settings of Site Manager, two wildcard entries are allowed in the "Reset Password URL" field for an Active Directory/Lightweight Directory Access Protocol (LDAP) Method. The following additional text displays before the "Reset Password URL" field:

"URL for LDAP users to change their own password. This URL will be the same for all LDAP Servers listed below. Note that instances of the string @@username in this URL will be replaced by the user's username, and instances of the string @@email will be replaced by the user's email address."

When @@username is included in the "Reset Password URL" field, that string will be replaced in the sent email with the username of the user requesting the password reset.

When @@email is included in the "Reset Password URL" field, that string will be replaced in the sent email with the email address of the user requesting the password reset.