When you use sp_password to change your password, Adaptive Server:
Decrypts all your login password encrypted key copies using the old password and then reencrypts them with the new password.
Updates any key copies assigned to you that are designated for login association. The key copies’ password type remains the same.
After a password change, you should log out of all your Adaptive Server sessions before accessing any encrypted data. Alternatively, you can use the immediate parameter of sp_password to propagate the password change to all sessions.
When the SSO issues sp_password to reset a user's password, the user’s login password-encrypted key copies are dropped by Adaptive Server because the user’s old login password is not available. Adaptive Server requires the key custodian to recreate the key copies for the user, if they are needed