Using Security Questions for Password Resetting
Situation:#
User forgets the password. How to reset the password with an answer to a security question? How this answer is defined?
Solution:#
User defines an answer to a security question when he fills out a special field. Information from this field will be verified and if the answer is correct, password will be reset.
How to implement:#
Two web parts are installed on a SharePoint site – Virto Active Directory Self User Serviceand Virto Password Reset and Recovery Web Part.
The first web part allows user to set an answer to a security question (value of the special field), the second web part enables to reset the password when user forgets it.
The following actions must be done:
- Virto Active Directory Self User Service installing.
- Adding special field which will contain answer to a security question.
- Virto Password Reset and Recovery Web Part installing.
- Selecting field (created in 3) in the Password Reset and Recovery Web Part settings for security question answer.
Detailed Instruction:#
For SharePoint site administrator
Install Virto Active Directory User Service. Then go to “Site Actions – Site Settings”. Follow the link “Virto Active Directory Service Settings”.
Click “Manage Fields” and use “Add Field” to add new field to the list.
Enter required data and pay attention to the field “AD Name” (corresponding field from Active Directory).
Click “OK”.
The field will appear in the Active Directory Self User Service Web Part.
Go to the site where Virto Password Reset and Recovery Web Part is installed. Use “Edit Web Part”.
Adjust web part for security question (see User Guide). Define the field (created with the Active Directory User Service) as a field with an answer to security question.
Click “OK”.
For user
Go to SharePoint site where the Active Directory User Service is installed. Fill out the field “Secure Answer (Pet’s Name)”. Click “Save”.
When user forgets his password
Go to the site with anonymous access (contact your administrator).
Enter answer to the security question. Click “Submit”. If the answer is incorrect, a message will appear.
When the answer is correct, password will be displayed and sent by e-mail.
