Password Manager 5.8.2 - Administrator Guide (AD LDS edition)

About Password Manager Getting Started Upgrading Password Manager to 5.8.1 Password Manager Architecture Management Policies
Checklist: Configuring Password Manager Understanding Management Policies Configuring Access to the Administration Site Configuring Access to the Self-Service Site Configuring Access to the Helpdesk Site Configuring Questions and Answers Policy Workflow Overview Custom Workflows Custom Activities Self-Service Workflows Helpdesk Workflows User Enforcement Rules
General Settings Password Policies One Identity Hybrid Subscription One Identity Starling Reporting Appendix A: Accounts Used in Password Manager for AD LDS Appendix B: Open Communication Ports for Password Manager for AD LDS Appendix C: Customization Options Overview Glossary

Unlock Account

Unlock Account

You can use this workflow to configure the Unlock Account task for the Helpdesk site.

The default configuration of this workflow is the following:

  1. Authentication Methods.
  2. Unlock account.
  3. Restart workflow if error occurs.
  4. Email user if workflow succeeds.
  5. Email user if workflow fails.

Unlock Profile

Unlock Profile

You can use this workflow to configure the Unlock Profile task for the Helpdesk site. By using this task, helpdesk operators can unlock user's profiles that are locked out as a result of a sequence of failed attempts to provide the correct answers to secret questions.

The default configuration of this workflow is the following:

  1. Unlock profile.
  2. Restart workflow if error occurs.
  3. Email user if workflow succeeds.
  4. Email user if workflow fails.

Enforce Update of Profile

Enforce Update of Profile

You can use this workflow to configure the Enforce Update of Profile task for the Helpdesk site. Helpdesk operators can perform this task to require users to update their Q&A profiles so that the profiles meet requirements of the current Q&A policy.

The default configuration of this workflow is the following:

  1. Enforce update of profile.
  2. Restart workflow if error occurs.
  3. Email user if workflow succeeds.
  4. Email user if workflow fails.

Overview of Built-in Helpdesk Activities

Overview of Built-in Helpdesk Activities

All built-in activities available in the helpdesk workflows fall into the following categories: authentication, actions and notifications.

Authentication activities are a group of activities that provide different authentication options, for example authentication with Questions and Answers profiles, or phone-based authentication.

The actions category includes activities that are core components of the helpdesk workflows, for example Unlock Account, Assign Passcode, and other activities.

Notification activities are activities that you can use to configure email notifications for users and administrators, and specify conditions under which the notifications should be sent.

The following sections describe the helpdesk activities and provide information about the settings specific to each activity.

Related Documents