What happens when the questions in the Q&A Policy are updated? (4267253)

From time to time it may be necessary to update the questions in the Q&A policy.

1. What effect does this have on new users?
2. What affect does this have on existing users?
3. How are users made aware of changes to the Q&A policy?

1. New users simply answer the questions presented to them in the ‘My Questions and Answers Profile’ workflow. These questions and answers (Q&A's) are stored in an encrypted field in the user objects comment attribute in Active Directory (AD).

2. For existing users who have answered an older set of questions from the ‘My Questions and Answers Profile’ workflow. These questions and answers (Q&A's) are stored in an encrypted field in the user objects comment attribute in AD.

If the administrator then changes one or more of the questions and the same user goes in to the ‘My Questions and Answers Profile’ workflow they will be presented with the new questions. The new questions along with the respective answers given will be stored in the comment attribute instead of the older Q&A’s.

However if the administrator changes one or more of the questions and the same user goes to use the ‘Forgot My Password’ workflow they will be presented with the original set of questions and not the new ones because the original set of questions are the ones stored in the user objects comment attribute. So in this case the questions listed in the ‘My Questions and Answers Profile’ workflow would be different from the questions listed in the ‘Forgot My Password’ workflow.

3. If the administrator changes some of the questions and wants all users to update their Q&A profiles to reflect the new set of questions then the administrator can either

a) Have Helpdesk run the workflow ‘Enforce Update of Q&A Profile’ for each and every individual user.

https://support.oneidentity.com/technical-documents/password-manager/5.7/administrator-guide/33#TOPIC-712070

b) Configure and run the enforcement rule ‘Invite Users to Create/Update Q&A Profiles’. This can be configured so that it runs if changes are made to the questions.

https://support.oneidentity.com/technical-documents/password-manager/5.7/administrator-guide/37#TOPIC-712087