Secure Password Extension
Secure Password Extension
Secure Password Extension is an independently deployed component that provides one-click access to the complete functionality of the Self-Service site from the Windows login screen. Secure Password Extension also provides dialog displayed on end-user computers that notify users who must create or update their Questions and Answers profiles with Password Manager.
Secure Password Extension should be installed on users’ computers through group policy.
For more information, see Secure Password Extension overview.
Offline Password Reset
Offline password reset
Offline Password Reset (OPR) is an independently deployed component that enables users to use the offline password reset functionality provided by Password Manager. This functionality allows resetting passwords when users have forgotten their current passwords and their computers are not connected to the intranet (Active Directory is not available).
Offline Password Reset should be installed on users’ computers through group policy.
The password can be reset by two methods when the user is offline. Do one of the following to reset the password when the system is not connected to corporate network.
With mobile QRcode scanner:
- Scan the QRcode from the welcome page and click Next.
- Scanning the QRcode redirects to Password self-Service site on the mobile device.
- On the Password Self-Service site, select the Forgot My Password option. This will give a response code to reset your password on the offline system.
- Type the response code in the Response code text box.
- Type the new password and confirm the new password in relevant text boxes.
- Click Next to reset the password.
|
NOTE:
- If you don't have latest .NET Framework to display QRCode Image, click Next to reset your password using the challenge code.
- Use the latest prm_gina.admx file by removing the older flle from group policy.
|
If the user fails to reset the password three times on Password Reset wizard for any reason, Offline Password Reset Wizard generates a new QR code. The user must scan the new QR code and follow the steps again to reset the password.
|
NOTE:
-
For the QR code to work, make sure that Password Manager Self-Service site URL exists in the registry.
-
To update the registry entry of the Password Manager Self-Service site URL, navigate to Generic Settings folder in the Administrative templates node and enable Specify URL path to the Password Self-Service site setting.
- If Password Manager Self-Service site URL is not present in the registry, Password Manager Self-Service site will not appear on 32 char challenge code window of OPR.
|
Without mobile QRcode scanner:
- Select the Select the checkbox if you do not have the QRcode scanner and click Next. checkbox, and click Next.
- On a device connected to the internet, open the Password Self-Service site and access your account.
- Select the Forgot My Password option.
- Enter the challenge code that appeared on the Password Reset page of One Identity Secure Password Extension Wizard in the text box and click Next.
- Type the response code in the Response code text box.
- Type the new password and confirm the new password in relevant text boxes.
- Click Next to reset the password.
For more information, see Reset Password in Active Directory.
Migration Wizard
Migration Wizard
Migration Wizard (part of Password Manager 5.11.3) users to update profile whenever the administrator reinitializes the Password Manager instance. For more information, see To update users’ Q&A profiles with new instance settings and clear old Q&A data for user objects in Active Directory.
Telesign
TeleSign
TeleSign is a service that provides phone-based authentication for Password Manager users. To enable the TeleSign service, it must be covered by your license and the administrator must configure the Authenticate via Phone activity and include the activity in corresponding workflows. If TeleSign is enabled, when performing a task on the Self-Service or Helpdesk site, users will be prompted to select their phone number, to which a one-time code will be sent by TeleSign, and then enter the code on the site for verification.
TeleSign service is available anywhere where users can receive calls or text messages. To receive verification codes, users do not need to install any applications on their phones.
To communicate with TeleSign, Password Manager uses REST API.
For more information, see Phone-based authentication service overview.