1. A method of changing a user password on a target system, the method comprising: receiving a first request from a user to change the user's password on a target system to be changed; sending a “change password” request for the user to the target system; storing the user's new password; receiving a second request from the target system on behalf of the user for access to a sensitive resource, wherein the second request contains information about the user's password; and denying the second request if the information about the user's password is not consistent with the user's stored new password.