Download
1 / 58
580 likes | 595 Views
A secure platform for password reset with user classification, self-service features, and multi-lingual support. Integrates seamlessly with iSecurity products and provides full audit capabilities. Simple administration for help desk and users.
E N D
Password Reset- Features Summary • Web & Green Screen interface • User identify verification based upon Class (Manager, Agent, Help Desk) • Supports assistance from Help Desk without compromising security • Supports importing corporate HR files to pre-populate user identity info • Supports multi-lingual and user-defined questions • Full audit trail and reporting • Integrates with other iSecurity products: User Management, Replication, Provisioning, Central Administration, Report Generator & Scheduler
Password Reset- A Self-Service, Reliable Solution • Simple to use and administrate: • Web and Green screen user interface • Green screen administration • Adjustable per the class (i.e. sensitivity) of the user. Ensures that the user is who they say they are, prior to disclosing the personally entered questions. • Allow Help Desk to easily assist users without compromising security or efficiency of procedures • Enable the enterprise to “introduce” the product to the organization with minimum overhead: • Uses existing HR data files • Auto request for entering personal questions • Full Report Generator
Guidelines • Users are classified by “Classes” (manager, programmer, agent); each class can have different verification rules • 3-Step Process: • Initial Identification: Use HR info to verify the user is who they say they are (periodic changes to the process are recommended) • Verify the user has access to their e-mail • User defines personal questions • Type and number of Verification rules is controlled per Class: • By Email, By Text Message to their cell phone • Number of verification types can be Either, Both or None • Questions & Answers are personal and displayed only after verification. Standard questions are provided.
Password Issuing and User Enabling • Passwords can be: • Displayed on the screen • Sent by e-mail • Password Issuing/User Enabling: • If user wishes - Just enable the user (retains the same password) • New password is generated • Password has to be entered within a specified period of time • Once entered, it must be replaced • Auditing Usage; • Email to administrator • Message to MSGQ • Product log. Processed by iSecurity Report Generator & Scheduler, results as e-mail with HTML, CSV, PDF attachments, screen, print, output file, etc.
Password Reset Workflow Self Authentication Help Desk Forgot Password? Sign on withFORGOT / PASSWORD Answer Personal Identification Questions Receive email with Temporary Password Receive email with Validation Code Enter Temporary Password and specify New Password Enter Validation Code Answer Personal Verification Questions (optional) Sign on with New Password
Initial Setup • 1. Create the Special User FORGOTyyy • 2. Define Authentication Control • 3. Set the Initial Process Questions • 4. Set the Initial Process Defaults • 5. Customize Password Reset Messages (optional) • 6. Add P-R Classes • 7. Add Roles/Systems • 8. Add Locations • 9. Add Departments • 10. Add Positions • 11. Add Standard Verification Questions • 12. Create New Persons • 13. Add Private Questions for a Person (optional) • 14. Test Password Reset
1. Create the Special User FORGOTyyy • yyy is language code (blanks = default) • Option 71-Activation >> Option 41 Create User
Definitions • Locations • Departments • Positions • Define the locations, departments, and positions (job titles) that are used in your organization. Together, these three make up the different roles in the organization.
Definitions - Locations • You can add up to 15 Locations at one time. The Locations are used to define Roles in Password Reset. You should set the location at the correct level to define the Roles for your organization; country, city, or even district.
Definitions - Departments • You can add up to 15 Departments at one time. The Departments are used to define Roles in Password Reset. You should set the department at the correct level for your organization so that you can define Roles. For some organizations, defining a Finance department may be sufficient. Other organizations may need to split the Finance department into its sub-departments, such as Planning, Accounts Receivable, Accounts Payable, and so on.
Definitions - Positions • You can add up to 15 Positions at one time. The Positions are used to define Roles in Password Reset. You should set the position at the correct level for your organization so that you can define Roles. For some organizations, defining a position of Driver may be sufficient. Other organizations may need to define different types of Driver, such as Fork Lift Driver, Truck Driver, Tractor Driver, and so on.
Add P-R Classes • Option 11 P-R Classes
Add P-R Classes • Password Reset classes define which identification procedures will be run when an attempt is made to reset a password and how the new passwords will be sent to users. Password Reset classes are used to ensure identical behavior for certain types of users, regardless of their physical location, to which department they belong, or to what job they perform. For example, you might want to have a set of identification procedures for all managers in your organization and a different set of identification procedures for all non-supervisory staff.
Add Roles/Systems • Roles are used to define which Systems are available for all User Profiles that belong to a specific combination of Location/Department/Position in your organization. This ensures that when users reset their passwords, the password is only sent to Systems to which they are allowed to work on. For example, your organization may have a separate system dedicated to each separate physical location. Alternatively, systems may be dedicated to the specific departments across locations, so that all finance departments use one system and all manufacturing departments use a different computer.
