Create a custom Password Reset verification

Use a verification type in the base system as a template to design a custom verification. The Password Reset Windows Application does not support custom verifications.

Before you begin

Role required: password_reset_admin

About this task

Table 1. Verification types in the base system
Verification type Description
Personal Data Confirmation Verifies user identity using data from the User [sys_user] table. The user data is displayed to a service desk agent. The agent verifies the data.

Enrollment is not required for this type.

Recommended for service desk-assisted processes.
Note: The Password Reset Windows Application does not support the Personal Data Confirmation Verification type.

See Personal data and personal data confirmation type verifications.
Personal Data Verifies user identity using data from the User [sys_user] table. The user is required to answer questions.

Enrollment is not required for this type.

Note: The Password Reset Windows Application allows you to define and use multiple verifications of the Personal Data type.
See Personal data and personal data confirmation type verifications.
Email Code When a user requests password reset, the system sends a verification code to the email address in the user profile or to an email address that the user authorized during enrollment. To verify identity, the user then submits the code on the Password Reset Verify page.
Note: The Password Reset Windows Application allows you to define and use multiple verifications of the Email Code type.
See Personal data and personal data confirmation type verifications.
Google Authenticator While requesting password reset, the user reads a code from the Google Authenticator app on a device that the user has paired. To verify identity, the user then submits the code on the Password Reset Verify page.
Note: The Password Reset and Password Reset Windows Application support only a single verification of the SMS Code type.
Security Questions Verifies user identity by presenting personal security questions that the user must answer correctly.
Note: The Password Reset and Password Reset Windows Application support only a single verification of the Security Questions type.

See Add a custom question to the Security Questions verification.
SMS Code When a user requests password reset, the system sends a code to an SMS-capable device that the user has authorized. To verify identity, the user then enters the code on the Password Reset web page.
Note: The Password Reset and Password Reset Windows Application support only a single verification of the SMS Code type.
See SMS code type verifications.
Mock Not a functional identity verification. Demonstrates how to add a verification type in a Password Reset process.
Note: The Password Reset Windows Application does not support the Mock verification type.
  • The enrollment UI macro for this verification gets the user input and returns the entered value in the enrollment processor.
  • The Password Reset UI macro for this verification gets input from the user and returns the entered value through the verification processor.

Procedure

  1. Navigate to Password Reset > Extensions > Verification Types.
  2. Click New, enter a unique and meaningful Name and Description, and then fill in the form.
    Field Description
    Type Create verifications based on one of the verification types in the base system.

    Password Reset supports the following types. You can create multiple instances of any type.

    • Personal Data Confirmation Verification
    • Personal Data Verification
    • Security Question Verification
    • SMS Code Verification
    The Password Reset Windows Application supports the following types:
    • Personal Data Verification. You can create only a single instance.
    • Security Question Verification. You can create multiple instances.
    • SMS Code Verification. You can create only a single instance.
    Order Position of the verification as it appears on the Enrollment form and Password Reset form.
    Password Reset Verification Parameters Parameters used by a verification to configure specific behaviors, like number of questions required to enroll, request expiration time, and columns used. Set parameters for any behavior that should be different from the value that is specified in the Password Reset properties.

    The available parameters are described separately for each verification type.
  3. Click Submit.
  4. Each verification type has properties that control the user experience. Review the property settings and update as needed.