Self-service Password reset - Google Authentication Verification.(Using OOB Method) :
This will ensure that password problems are only resolved after adequate user authentication by Google Authenticator App, eliminating an important weakness of many service desks, and reducing the chances of social engineering attacks and identity theft.
- Expected result of configuration: The enrolled user should be able to complete a password reset with the Google Authenticator Application’s authentication process.
Step 1:
Go to filter navigator >> Password reset >> Processes.
Step 2:
Create a new process and provide the below information:
Name, description, Credential store (Local ServiceNow Instance [OOB]), Set true: password Change, Password Reset, Active, Apply to all users.
Step 3:
Go to Password Reset Details related list >> Create a Public URL for the defined process: Set true for the option Public Access then provide the URL suffix.
Also set Display captcha value as true and Identification type. (I have selected username identification). Provide the other optional information, if required.
Step 4:
Go to Verifications related list >> Click on edit >> select “Google Authenticator Verification” and add to verification List. Save the process.
Step 5:
Go to App Store and download the App “Google Authenticator App” in your mobile.
Step 6:
Go to Enroll module under Password reset.
Step 7:
Click on Enroll >> Open the App in your mobile and scan the QR code shown in the Enroll process and enter the 6-digit code generated after the scan to Pair device and submit the enrolment.
Step 8:
Now access the URL generated in the Step 3, it will redirect to the password reset window.
Provide the username and complete.
Step 9:
Provide the verification code and submit.
Step 10:
Reset your password by satisfying the password and submit the form.
If you find the articles is good, please mark it as helpful and let me know in case of any query.
Thank you,
Vijaykumar Gurunath
