Password Answers for Enrollment

Kyle Wiley
Mega Expert

Is there a way to do an upload of information to populate at least 1 question for user's Password Enrollment?  

 

Our Security team would like to be able to pull all user's hire date and input that as a security question answer for Password Enrollment.

1 ACCEPTED SOLUTION

robpickering
ServiceNow Employee
ServiceNow Employee

This should be possible by pre-populating the table 'pwd_active_answer'.


The answers are one-way encrypted.



Some other threads in the Community on this topic:


Auto-Enrolment in Password Reset Orchestration and QA Verification encryption?


Re: Password Reset Plug-In Auto-Enrollment



You should be able to write an import set and transform map that would take in your users and populate answers into the table.


The tricky part is the encrypted field.   I'd have to try it to see how the transform map handles it, but I believe it will handle the encryption since that's how the field is set up, you'll just have to provide the question (reference to the question table) the user and the answer.



Also note, "enrollment" is defined by the system to mean something specific.   If you have a minimum requirement of three Question/Answer pairs, then only populating one answer will NOT enroll the user, and they will be unable to use Password Reset until manually enrolling and fulfilling the requirement.   You will have to either populate the full requirement of Question/Answer pairs, or else lower the requirement to be only 1.   If you then increase the minimum requirement above 1 in the future, the system will re-evaluate "enrolled" and if users fail to meet the requirement, they will not be able to use Password Reset.



For this reason, we would recommend having users go through the normal enrollment process and not pre-populate answers.



-Rob


View solution in original post

6 REPLIES 6

robpickering
ServiceNow Employee
ServiceNow Employee

This should be possible by pre-populating the table 'pwd_active_answer'.


The answers are one-way encrypted.



Some other threads in the Community on this topic:


Auto-Enrolment in Password Reset Orchestration and QA Verification encryption?


Re: Password Reset Plug-In Auto-Enrollment



You should be able to write an import set and transform map that would take in your users and populate answers into the table.


The tricky part is the encrypted field.   I'd have to try it to see how the transform map handles it, but I believe it will handle the encryption since that's how the field is set up, you'll just have to provide the question (reference to the question table) the user and the answer.



Also note, "enrollment" is defined by the system to mean something specific.   If you have a minimum requirement of three Question/Answer pairs, then only populating one answer will NOT enroll the user, and they will be unable to use Password Reset until manually enrolling and fulfilling the requirement.   You will have to either populate the full requirement of Question/Answer pairs, or else lower the requirement to be only 1.   If you then increase the minimum requirement above 1 in the future, the system will re-evaluate "enrolled" and if users fail to meet the requirement, they will not be able to use Password Reset.



For this reason, we would recommend having users go through the normal enrollment process and not pre-populate answers.



-Rob


Teena Singh
ServiceNow Employee
ServiceNow Employee

Kyle,


Glad to see that you are using the Community to learn more.


The Customer Experience team is striving to ensure that customer queries posted from the HI Service Portal are answered in timely and accurate fashion.


If you feel your question has been resolved, please mark the appropriate reply in the thread as being the Correct Answer.


This enables other customers to learn from your thread.


Thank you in advance.



If you are viewing this from the community inbox you will not see the correct answer button.   If so, please review How to Mark Answers Correct From Inbox View.



Regards,


Teena Singh
Customer Experience: UX Strategy and Customer Insights
teena.singh@servicenow.com


ServiceNow


Screen Shot 2017-01-19 at 8.55.52 AM.png


fosborne
ServiceNow Employee
ServiceNow Employee

@Kyle Wiley


Hi Kyle,


Were you able to successfully import into the pwd_active_answer table?


Did this process work so you could auto-enroll using question/answer?


Honestly, it became a lower priority and management is interested in other things at the moment so we have not attempted anything yet...