Password Reset Enrollment Options

[JimCheffer]

Hello All,

I am trying to setup Password reset verification options of either SMS verification or QA verification. I have setup groups, one for SMS and one for QA verification. My test users are assigned then assigned a group. The enrollment process then brings up both verification options. It expects both options to filled out. I was expecting SMS or QA enrollment to appear based on user group but that is not the case. Is there a way around this?

Ideally I would like to provide both enrollment options and let the user decide SMS or QA but that does not seem possible.

Also has anyone setup their own verification process. We would like to provide alternate email as an option. I have looked at developing one but it seems very complicated.

Thanks in advance

Jim

[Community Alums]

Jim,

I was able to get one option or the other to show for a user by creating two different Processes associated with the same Credential Store. One Process is configured to use SMS Verification and the other is configured to use the QA verification. Only those in the groups associated with the SMS Process get the SMS enrollment options and only those associated with the QA Process get the QA options. If someone is associated with both, it appears they need to complete the options for both, though, not one or the other. I'm not sure if there is a way around that...

Actually, one method could be to allow users to self-identify as part of a group. It sounds like you have an SMS group and a QA group. I'm not a huge fan of this because it requires one more step before someone does the enrollment, but it could be a way to allow someone to select which method of verification to use. Ask them which, and depending on what they select, add them to that group, then drop them into the enrollment process...

I haven't set up a verification process, so I can't comment on your final question.

Ben

[JimCheffer]

Hello Ben, thanks for the response. I have two processes (SMS and QA). My issue is that when a user of the group tries to enroll they see and must enroll in both. The enrollment function does not know which group has what verification. Jim

[Community Alums]

Jim,

This is what I did, just to confirm your setup:

Process 1 - SMS Reset Process

• Credential Store - Local SN
• NOT available for all users
• Group - SMS Reset Group - members Abel and Baker
• Verification - SMS Verification

Process 2 - QA Reset Process

• Credential Store - Local SN
• NOT available for all users
  
• Group - QA Reset Group - members Baker and Charlie
• Verification - QA Verification

When Abel logs in, he only sees the SMS enrollment options.

When Charlie logs in, he only sees the QA enrollment options.

When Baker logs in, she sees both options.

If Zelda logs in, she doesn't see any options, as she is not a member of either of the groups associated with the reset processes.

[JimCheffer]

Ben,

This is what I have setup.

Process 1 - Password Reset Process - QA

• Credential Store - our AD and Domain
• NOT available to all users (Apply to all users is unchecked)
• Group - PWD - Questions Verification Required (members JBF, MEM, CARB)
• Verification - QA Verification

Process 2 - Password Reset Process - SMS

• Credential Store - our AD and Domain
• NOT available to all users (Apply to all users is unchecked)
• Group - PWD - SMS Verification Required
• Verification - SMS Verification (members JIH, OR-AK, AYS-Test3).

Here is my problem..

When MEM attempts to enroll (Password Reset > Enrollment) the form brings up both the Enrollment for SMS verification and Enrollment for QA Verification).   How do I only show in this case the QA Verification so that MEM can register the answers to the three questions.

Your example of Abel, Baker and Charlie is what I am looking for.

We are Eureka Patch 11 in development instance.

Jim