Password Manager 5.7.1 - Administration Guide

Enforce Update of Q&A Profile

You can use this workflow to configure the Enforce Update of Q&A Profile task for the Helpdesk site. Helpdesk operators can perform this task to require users to update their Q&A profiles so that the profiles meet requirements of the current Q&A policy.

The default configuration of this workflow is the following:

1. Enforce update of Q&A profile.
2. Restart workflow if error occurs.
3. Email user if workflow succeeds.
4. Email user if workflow fails.

Helpdesk Activities Overview

All activities available in the helpdesk workflows fall into the following categories: authentication, actions and notifications.

Authentication activities are a group of activities that provide different authentication options, for example authentication with Questions and Answers profiles, or phone-based authentication.

The actions category includes activities that are core components of the helpdesk workflows, for example Unlock Account, Assign Passcode, and other activities.

Notification activities are activities that you can use to configure email notifications for users and administrators, and specify conditions under which the notifications should be sent.

The following sections describe the helpdesk activities and provide information about the settings specific to each activity.

Authentication Activities

This section describes workflow activities that provide different authentication options.

Authenticate with Q&A Profile

Authenticate with Q&A Profile

Use this activity to authenticate a user with a personal Questions and Answers profile. In this activity you can specify mandatory and helpdesk questions from user’s Q&A profile that a user must answer to be authenticated.

You can select one of the following authentication methods:

• Answers to the specified questions (user’s answer is shown). In this mode, a helpdesk operator will ask a user for complete answers to the specified questions, and then compare them to the answers displayed on the identity verification page.

  IMPORTANT: This option cannot be used if user answers are not stored using reversible encryption. To store answers using reversible encryption, select the corresponding option in the Q&A profile settings.

  NOTE: By default, the answers on the Verify User Identity page are not displayed. To display the answers, you can clear the Hide my answers for security purposes checkbox on the Verify User Identity page.

• Answers to the specified questions (user’s answer is not shown). In this mode, a helpdesk operator will ask a user for complete answers to the specified questions, and enter the answers on the identity verification page.

  NOTE: By default, the answers on the Verify User Identity page are not displayed. To display the answers, you can clear the Hide my answers for security purposes checkbox on the Verify User Identity page.

• Random characters of answers to the specified questions. In this mode, a helpdesk operator will ask a user to tell the specified number of characters in the user's answer to a specified question, and then type in those characters in the appropriate positions on the identity verification page.