---
title: Proxied authorization
description: When connecting to PingDirectory or Oracle Directory Server, configure proxied authorization for the service account on the directory server if you intend to enable self-service password reset in any HTML Form Adapter instances that use this datastore.
component: pingfederate
version: 13.0
page_id: pingfederate:administrators_reference_guide:pf_proxied_authorization
canonical_url: https://docs.pingidentity.com/pingfederate/13.0/administrators_reference_guide/pf_proxied_authorization.html
revdate: February 6, 2023
---

# Proxied authorization

When connecting to PingDirectory or Oracle Directory Server, configure proxied authorization for the service account on the directory server if you intend to enable self-service password reset in any HTML Form Adapter instances that use this datastore.

By configuring proxied authorization for the service account on the directory server, users are not allowed to reset their passwords if their accounts are disabled or if they were not granted permission to change their passwords.

For information on configuring proxied authorization for service accounts, see the following table.

| Directory server         | Reference                                                                                                                                                                                                      |
| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| PingDirectory            | Learn more in [Working with Proxied Authorization](https://docs.pingidentity.com/pingdirectory/latest/managing_access_control/pd_ds_work_with_proxied_authn.html) in the PingDirectory Administration Guide.   |
| Oracle Directory Server  | Learn more in [Proxy Authorization](https://docs.oracle.com/cd/E19656-01/821-1502/aalhm/index.html) in the Oracle Fusion Middleware Deployment Planning Guide.                                                 |
| Oracle Unified Directory | Go to Oracle's online guide [Fusion Middleware Administering Oracle Unified Directory](https://docs.oracle.com/cd/E52734_01/oud/OUDAG/toc.htm) and search for "proxied authorization control" in its glossary. |

|   |                                                                                                                                                                                                                                                                        |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Microsoft Active Directory doesn't support proxied authorization. Learn more [3.1.1.3.4.2.4 LDAP\_SERVER\_WHO\_AM\_I\_OID](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/faf0b8c6-8c59-439f-ac62-dc4c078ed715) in the Microsoft Documentation. |

For general information about proxied authorization, see [RFC 4370](https://datatracker.ietf.org/doc/html/rfc4370).