Products
Self-service Password Reset Ma...
Overview
8 min
the activate self service password reset (sspr) manager provides users with a secure, streamlined method to reset their own passwords without administrative assistance it integrates directly with the organization’s active directory (ad) or entra id environment, ensuring compliance with corporate password policies and maintaining enterprise level security overview activate’s sspr manager enables users to recover or change their passwords through a guided web interface it supports multi factor verification and can be accessed both internally and externally via activate anywhere , offering full support for remote or hybrid users key features identity verification supports configurable challenge response questions, sms or email one time passcodes (otp), and integration with corporate mfa solutions policy enforcement automatically aligns password complexity and expiry rules with the organization’s ad or entra id policies secure access boundary when accessed externally, all communication routes through activate anywhere , ensuring password resets occur over a secure, authenticated channel audit and logging all password reset attempts are recorded in the activate event log for compliance, monitoring, and traceability administrator control administrators can define and enforce password reset policies enable or disable the sspr feature for specific roles review reset history and audit logs in activate studio typical workflow the user navigates to the password reset page on the activate or anywhere site the system validates the user’s identity using the configured verification method the user sets a new password that complies with policy requirements the password change is written directly to ad or entra id and logged for audit purposes benefits reduces helpdesk workload and response times provides secure, compliant password recovery for remote and hybrid workforces enhances user experience while maintaining enterprise grade security controls security overview general security secret answers are encrypted and stored securely in the activate sql database security questions are configurable and should avoid personal or easily guessable content options available for configuration number of questions required for registration or reset minimum answer length (default 3 characters) user registration status is recorded in active directory’s extensionattribute1 example ad attribute data stored in extensionattribute1 \<?xml version="1 0" encoding="utf 16"?> \<user> \<password> \<answers set="1" when="2013 08 29t10 52 57" /> \</password> \</user> security features (immutable) answers cannot be blank all answers must be unique case insensitive matching is enforced do not modify or override these immutable security rules they are designed to preserve the integrity of the password reset system external password reset & credential provider uses a rest based web service for communication transport security 256 bit aes encryption for all communication between client and server logical security each transaction uses a unique session key to prevent spoofing or replay attacks answers are never transmitted to the client during the process, ensuring sensitive data remains protected