Anonymous_User Absent Member.
Absent Member.

Changing when challenge/response setup occurs

We are trying to implement SSPR for our supplier portal with edirectory
password policies and are using challenge/response for Forgotten
Password. The idea is to have the portal login page (using Entrust
getAccess not Access Manager) calls the
CommandServlet?processAction=checkExpire on successful login.
Therefore, if the user is within the warning period before expiry they
are going to be shown the challenges whether they want to complete them
at that time or not. The business are complaining that they don't want
users being presented with the challenge/response setup on first login
without warning as they might be trying to access the portal for an
urgent activity.
They would want users to be able to set their challenges at a time
convenient to them, but they should be warned on login periodically if
they haven't set their responses yet, similar to the change password
warning before expiry which gives the option to either change your
password or Continue to the portal.
Is this possible with SSPR?

mratcliffe's Profile:
View this thread:

1 Reply
Anonymous_User Absent Member.
Absent Member.

Re: Changing when challenge/response setup occurs

When you enable Challenge Response you have the option of checking the
checkbox for 'Force Response Setup', or not. If not, the option is there
after logging into SSPR but need not be used until later.

Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.