Password Reset Enrollment Options

[JimCheffer]

Hello All,

I am trying to setup Password reset verification options of either SMS verification or QA verification. I have setup groups, one for SMS and one for QA verification. My test users are assigned then assigned a group. The enrollment process then brings up both verification options. It expects both options to filled out. I was expecting SMS or QA enrollment to appear based on user group but that is not the case. Is there a way around this?

Ideally I would like to provide both enrollment options and let the user decide SMS or QA but that does not seem possible.

Also has anyone setup their own verification process. We would like to provide alternate email as an option. I have looked at developing one but it seems very complicated.

Thanks in advance

Jim

[Community Alums]

Hi Jim,

I'm glad to hear you are up and running. I wonder what happened. Good luck with your password resets. May they go smoother than password resets with Jeffy (August 30, 2015 | Family Circus).

[robpickering]

This is how it works out-of-box, I've gone around and around with ServiceNow (can provide Incidents (closed), and even had their PS group custom write me a workaround (that didn't work)) on this, they realize it's a huge flaw.

If a user is eligible for both Q/A and SMS (or a custom verification), then they are required to enroll in all of them that they are eligible for, you cannot opt out of one.

Unfortunately, I cannot easily discern who should be eligible for Q/A + SMS, or just QA.

Hopefully they'll fix this.

-Rob

[JimCheffer]

Rob,

Thanks for the comment. Yes I have found the same issue that if I setup a Q/A and SMS process then user must enroll in both. The enrollment form is not user friendly either (I have other words for it). Creating group for each does work but we have same issue as to who is assigned to which group. Also found that we need to have public self service site one for SMS and another for Q/A. We currently have a three question verification process (MS FIM) for all users but no one seems to remember their answers. We are probably going to go with SMS self service assuming that most people have smart phones.

You mentioned custom verification. Have you developed one? We would like to provide an alternate email verification. When I looked at the documentation on custom verification it was WAY over my head.

If there is band wagon for improvements to Password reset I would jump on.

Jim

[robpickering]

Jim, file an Enhancement Request on HI.   If enough of us do, they'll hopefully fix it.   I've actually spoken to the Product Manager for Password Reset on the phone and he's aware of the issue and hopefully moving it up the list...

-Rob

[JimCheffer]

Rob, I submitted an enhancement request (FTASK23036). Also submitted one (FTASK23037) to provide an out of box alternate email process.I have reviewed the instructions on custom verification but it is way over my head.   Jim