Enable SMS code notification for enrollment and verification [Updated in Security Center 1.3]

The password_reset.sms.use_notify property controls the usage of SMS code notifications for password reset.

If the password_reset.sms.use_notify property is set to the recommended value of true, the user is notified to do a password reset using SMS verification and new device enrollment which is more secure than email.

More information

AttributeDescription
Configuration name password_reset.sms.use_notify
Configuration type System Properties (/sys_properties_list.do)
Data type booelan
Recommended value true
Default value true
Category Authentication
Security risk
  • Severity score: 3.7
  • CVSS score: Low
  • Security risk details: Setting this property tofalse makes email the default method for password recovery which is less secure than SMS.
Dependencies and prerequisites None