To start the enrollment process, you need to enable and configure the Invite users to create/update Q&A profiles rule. This rule sends email notifications to the users specified in the rule’s scope, inviting them to create or update their Questions and Answers profiles. When configuring email notifications for this rule, you can insert a hyperlink to the Self-Service site. To add the hyperlink, enter the required URL in the email notification body. For example, http://mydomain.com/user. Note that you cannot specify the hyperlink text.
To configure the Invite users to create/update Q&A profiles enforcement rule, you need to specify the conditions under which users should be notified. For example, users are not registered with Password Manager, users’ answers are shorter than required, or users have specified the same answers for several questions. These conditions correspond to the Q&A profile settings that are part of the Q&A policy. For more information, Configuring Q&A profile settings. For more information on configuring this enforcement rule, see Invite Users to Create/Update Profiles.
|NOTE: Only one email notification is sent to each user. If you want to remind users that they should register with Password Manager or update their Q&A profiles and send multiple emails, enable and configure the Remind users to create/update Q&A profiles enforcement rule.|
The Remind users to create/update Q&A profiles enforcement rule can notify users via email and via notification dialog displayed by Secure Password Extension installed on users’ computers. When configuring this rule, you can specify several notification scenarios. For each scenario, you should set the time period since the invitation date and notification option (email or Secure Password Extension).
For example, you can configure the following scenarios:
For more information on configuring this enforcement rule, see Remind Users to Create/Update Profiles.
|NOTE: If the user does not create or update his Q&A profile in the specified number of days, you can disable the user account. For more details see Forced Enrollment.|
If you want to configure different notification scenarios for different user groups, you can create several management policies, and within each Management Policy configure the Remind users to create/update Q&A profiles enforcement rule appropriately for different user groups.
Questions and Answers policy consists of secret questions and Questions and Answers profile settings. Secret questions are questions that users must answer to create their profiles and then use the profiles for authentication. You can create question lists in multiple languages. Each question list contains mandatory, optional, and Helpdesk questions. When creating profiles, users must answer all mandatory and Helpdesk questions, and a specified number of optional and user-defined questions. You can specify the required number of questions in the Q&A profile settings.
When authenticating on the Self-Service site with Q&A profiles, users can use mandatory, optional, and user-defined questions from their profiles. When a Helpdesk operator authenticates users, the operator can use mandatory and Helpdesk questions from users’ profiles.
Q&A profile settings are a collection of settings that define the number of user-defined and optional questions required for registration, minimum length of answers, encryption setting for storing answers, and others.
© 2022 One Identity LLC. ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー