Figure 1: Link to access form.
Figure 2: SImple form with Captcha validation.
Figure 3: If user provided a valid e-mail/workforceID and if the account was under a temporary lockout at submit time, the user can now use standard Challenge Response to select a new password and then resume his or her work.
Figure 4: Object class RequestUnlockAccount(derived from top, contained by domain, Organization and Organization Unit) with mandatory/naming attribute CN and optional attributes Internet email Address and workforceID.
Figure 5: Instance of object, and Proxy account used by the form to modify object.
Figure 6: Trustee rights for Proxy user.
Figure 7: Trustee rights for Proxy user, write on the 2 attributes.
Figure 8: Null/Loopback Driver rule (Subscriber Command Transform) that detects events on the request object and processes them after validation.
Figure 9: Filter for Null Driver.
Figure 10: Creation of a new guest page in User Application.
Figure 11: Permission on new guest page(remove check for View permission set to Admin only).
Figure 12: Add iFrame portlet through Content.
Figure 13: Change URL for portlet to point to form.