2957801 - SFSF password migration is not taking effect - "Passwords can only be changed once every %{param0} hours" upon forgot password

After provisioning users from SuccessFactors to IAS via IPS, affected users cannot log on with username and password. When using the Forgot Password link, they see:

• Passwords can only be changed once every %{param0} hours.
• Passwords can only be changed once every 24 hours.

IAS Troubleshooting logs show a WARN entry:

• Cannot send Forgot Password Mail to user with uid <P_UserID>. Reason: PASSWORD_DISABLED.

Additional conditions that must all be present:

• SuccessFactors password migration to IAS is configured as described in Migrating Passwords from SAP SuccessFactors to the SAP Cloud Platform Identity Authentication Service (IAS).
• Affected users already existed in IAS before the IPS sync job ran.
• Users first attempt to log on (password fails), then trigger a password reset - the error appears on that reset attempt.

• Identity Authentication (Target)
• Identity Provisioning
• SAP SuccessFactors HXM Suite (Source)

IAS, IPS, SFSF, SuccessFactors, Source System, password, migration, Forgot Password Mail, Reason: PASSWORD_DISABLED. , KBA , BC-IAM-IDS , Identity Authentication Service , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem