Chat now with support
Chat with Support

The Quest and One Identity Support Portals will be unavailable on Friday July 10, 2020 from 5:30 PM to 6:30 PM for website maintenance.

Password Manager 5.8.2 - Administrator Guide (AD LDS edition)

About Password Manager Getting Started Upgrading Password Manager to 5.8.1 Password Manager Architecture Management Policies
Checklist: Configuring Password Manager Understanding Management Policies Configuring Access to the Administration Site Configuring Access to the Self-Service Site Configuring Access to the Helpdesk Site Configuring Questions and Answers Policy Workflow Overview Custom Workflows Custom Activities Self-Service Workflows Helpdesk Workflows User Enforcement Rules
General Settings Password Policies One Identity Hybrid Subscription One Identity Starling Reporting Appendix A: Accounts Used in Password Manager for AD LDS Appendix B: Open Communication Ports for Password Manager for AD LDS Appendix C: Customization Options Overview Glossary

Helpdesk Workflows

By configuring the helpdesk workflows you can specify what tasks will be available to helpdesk operators on the Helpdesk site, and configure options for each available task. You can also create custom activities and custom workflows. For more information, see Custom Workflows and Custom Activities.

The following helpdesk built-in workflows are available:

  • Verify User Identity
  • Assign Passcode
  • Reset Password
  • Unlock Account
  • Unlock Q&A Profile
  • Enforce Update of Q&A Profile

The helpdesk workflows correspond to the tasks on the Helpdesk site. If you enable a helpdesk workflow, the corresponding task will be available to operators on the Helpdesk site.

Verify User Identity

You can use this workflow to configure the Verify User Identity task for the Helpdesk site. A helpdesk operator should verify user identity before performing any password management task.

The default configuration of this workflow is the following:

  1. Authentication Methods.
  2. Restart workflow if error occurs.
  3. Email user if workflow succeeds.
  4. Email user if workflow fails.

Assign Passcode

You can use this workflow to configure the Assign Passcode task for the Helpdesk site. By using this task helpdesk operators can assign temporary passcodes to users who have forgotten their passwords and are not registered with Password Manager or have forgotten their answers to secret questions.

The default configuration of this workflow is the following:

  1. Assign passcode.
  2. Unlock Q&A profile.
  3. Restart workflow if error occurs.
  4. Email user if workflow succeeds.
  5. Email user if workflow fails.

Reset Password

You can use this workflow to configure the Reset Password task for the Helpdesk site. Helpdesk operators use this task to reset user passwords in managed AD LDS instances and other connected data sources, if applicable.

The default configuration of this workflow is the following:

  1. Authentication Methods.
  2. Reset password in AD LDS.
  3. Restart workflow if error occurs.
  4. Email user if workflow succeeds.
  5. Email user if workflow fails.
Related Documents