We configured the Active Directory endpoint as trusted source for CA Identity Manager and then installed the password sync agent in Active directory.
We changed the password of a Active Directory Account then the user was unable to login to CA IDM with the new password.
CA Identity Manager 14.1 with Password Sync Agent
Our recommendation step is as follows for upgrading PSA.
1. Back up Password Synchronization Agent folder.
2. Uninstall current Password Synchronization Agent (not to overwrite).
3. Reboot AD server.
4. Install new Password Synchronization Agent.
5. Reboot AD server.