Forcing Users to set Security Questions

Hi All,
Currently when a user joins the organization, the user can go to IdM user interface, login and set security questions. But this is an option only if user wants to use self service in IdM. So, it has been found that users are not setting it and it becaomes a pain when they call help desk for password change and help desk is not able to verify the user's identity because security questions are not set.
Please share your thoughts how other organizations are handling this situation.
Is there any way that we can force a user to set security questions when the user logs in first time?
Regards,
Gaurav

Hello,
In our Organization we did the following.
Under the Security tab there is a Policy tab.
There you should find a policy called: Default Identity Manager Account Policy.
Under Secondary Authentication Policy Options make sure "Enforce Answer Policy at Login" is checked.
In page help states:
Select this option to enforce the authentication question policy when the user logs in to this interface.
This solution works however it did become problematic while we had pass-thru authentication configured.
All the best
-IDMxml

Similar Messages

How to install Twitter app without setting security questions?

Hello! I recently registered a Twitter account. iOS 6 includes Twitter integration - great. When I navigate to Settings - Twitter and tap the Install button, a dialog shows up: "Improve your Apple ID security" and "Set security questions" blah blah. There are two buttons in the dialog, "Set questions" and "Cancel". If I tap Cancel, Twitter app download doesn't begin and Twitter icon disappears from my SpringBoard. If I tap "Set questions", I need to answer some stupid questions. If I leave answer boxes empty, I can't continue. I will not set any security questions for my Apple ID, that's for sure.
How I can install Twitter app?

I just encountered the same problem when I tried to download Twitter on my husband's new iPhone 5. There was no problem when I installed Twitter on my iPhone 3GS yesterday :-(
You've probably seen by now that there are many, many people who are having problems with the 'Help improve Apple ID security' message - not confined to iPhone but also on iTunes, iPod Touch, iPad etc.
I chose the 'Not Now' button on his iPhone 5 and the Twitter app wouldn't allow me to proceed ....
Looks like Apple aren't in any hurry to fix this because people have been complaining about it for months (after all, your post is more than 3 months old and the problem is still occurring).
Were you ever able to activate Twitter on your iPhone 4S?
Tricia

I am being forced to create 3 security question from your dropdown list and I can choose the questions but can't enter anything in the answer field??

I am being forced to create 3 security question from your dropdown list and I can choose the questions but can't enter anything in the answer field??

The problem is twenty three people leaving or twenty three thousand leaving has zero impact on a carrier with over 100 million customers. And they have the lowest churn rate. So if 10,000 or 20,000 or more churn out it means little to the carrier.
If you have a real lawyer he/she will advise you that you have no case. The device was not lost or stolen by the carrier, you were not eligible for a new device, and like any business who employs large numbers of poorly trained personnel who make low wages what was told to you is not in writing. So a verbal exchange does not hold up.
In fact in Verizon's customer agreement it has such a disclaimer against any verbal exchanges so if you have that agreement in writing, go get them.
The posting on public forums and places like Face Book, Linkin, Google+ or a personal web site can open you up to a lawsuit for Dilution of Trade Name, and other offences. However if you have proof then go for it.
Unfortunately that is how big business works today. A pity

Set Security Question & Answer using UME API in Web dynpro Java

Hi Experts,
I;ve developed a Web Dynpro java application to create a user in UME.
I am able to set all the user account related attributes but I am not able to set the security question and answer as I do not see any attribute for the same.
Can anyone please suggest how to set the Security question and answer in UME?
This is required so that if the user wishes to reset his password / forgets password, we can ask him the security question which he selected at the time of registration.
Please let me know if it can be achieved at the code level and whether UME API supports security question and answer or any such attribute.
Also, if no such attribute is present by default in UME at the moment; can we create/configure some custom attributes in UME and store the security question and answer into those attributes. This would serve our purpose.
Kindly assist.
Regards,
Anurag

Hi,
Thanks a lot for the reply!!!
I have one doubt here:
You've mentioned the below code to fetch the security questions in your reply:
IUser user = WDClientUser.getCurrentUser().getSAPUser();
String CUSTOMER_NAMESPACE = "com.sap.security.core.usermanagement";
String attmotname [] = user.getAttribute(CUSTOMER_NAMESPACE,"MotherName");
String attlucknum [] = user.getAttribute(CUSTOMER_NAMESPACE,"LuckyNumber");
String attmobnum [] = user.getAttribute(CUSTOMER_NAMESPACE,"MobileNumber");.
But this would be only applicable when the user has already logged on to the portal as it uses "WDClientUser.getCurrentUser().getSAPUser();" code.
On the contrary, I want the security questions and answer to be accessed even when the user is not logged on to Portal so that based on the question & answer, the user can reset his password.
Please suggest, how can we achieve this and where and how to set the custom attributes for the same?
Do we have to set the Publicly Viewable Custom Attributes present at location you mentioned in your reply?
Also, if yes; please let me know how to set the custom attributes?
Thanks & Regards,
Anurag

I never set security questions -- how to change?

I have no rescue email, I never set those security questions in the first place, and no way to contact support now.
I can make an appointment to call them a week from now. Is this so called support just a waste of my time?

The Apple Support Communities are an international user to user technical support forum. As a man from Mexico, Spanish is my native tongue. I do not speak English very well, however, I do write in English with the aid of the Mac OS X spelling and grammar checks. I also live in a culture perhaps very very different from your own. When offering advice in the ASC, my comments are not meant to be anything more than helpful and certainly not to be taken as insults.
Some folks report that one way arounfd the security questions is by reviewing or changing their bank card info. I would use the iTunes app on the computer to do that.

HT1918 Re set security questions

How do I re set my security questions for my Apple ID account as I cannot remember the answers

You need to ask Apple to reset your security questions; ways of contacting them include phoning AppleCare and asking for the Account Security team, clicking here and picking a method for your country, and filling out and submitting this form.
They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
(104017)

Cannot force users to set new password

Hi I have a Intel Xserve running Server 10.5.8
My system is running DNS and is an OD master
I have approx 30 users connected to system
most are using Portable Home Directories, some are using network accounts.
It has been decreed that all users need to change their passwords and use a combination of letters, numbers and a set amount of characters.
I have set up the policy in OD for users and set it to "change password at first login" - This is NOT working on existing accounts and is NOT workig on newly created test accounts either.
I have then gone into WGM > User > Advanced - and have set up the policy for the user there also, but still is not enforcing the password change or policy.
Can anyone point me at some helpful information as to how I can overcome this problem, preferably without rebuilding the server and setting up user accounts from scratch.

you could change parameter
login/password_expiration_time
to - let's say 1 and restart all of the instances of that special system. after one day all users would have to change their passwort.
you could then reset the parameter to 0 (or to whatever value you think adequate) on all instances of the system and restart them ...
thus having forced all your users to change the password at least once.
Edited by: Mylene Euridice Dorias on Mar 11, 2008 4:23 PM
for some users you have to use SU01 ...

How canI set security questions when it will not recognize my answers?

How can I reset security questions when it will not recognize my answers?

1. See my User Tip for some help: Some Solutions for Resetting
    Forgotten Security Questions: Apple Support Communities.
2. Here are two different but direct methods:
    a. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
    b. Call Apple Support in your country: Customer Service: Contacting Apple for
        support and service.
3. For other queries about Apple ID see Frequently asked questions about Apple ID.
4. Rescue email address and how to reset Apple ID security questions
5. For online assistance use Apple - Support - Express Lane

HT201303 I am trying to set security question.but I don't know how to?.i try everything.email or other but not succcess.

I forget the security question.i am trying to set new question so this time I am write my notebook.

If you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then the steps half-way down this page should let you reset them : http://support.apple.com/kb/HT5312
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down the HT5312 link above to add a rescue email address for potential future use

I never set security questions but I never answered them. Help!

I am being asked to answer security questions that I never set. What do I do?

Click here for information. If you can't get the answers emailed to you for some reason, contact the iTunes Store staff via the link in that article.
(76856)

HT201363 I never set security questions on my iTunes account!!!

Hello,
      I have never set up questions for my ITunes account. Soo I can not use my iTunes cards for enny thing!! My and my brother share and he got the cards for his birth day and we want to use it for a game.
            Please help
                  From:Bailey Lerma

You need to ask Apple to reset your security questions; ways of contacting them include clicking here and picking a method for your country, phoning AppleCare and asking for the Account Security team, and filling out and submitting this form.
They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
(103321)

HT201303 set security questions

how do i set my security questions

Welcome to the Apple community.
Start here, change your country if necessary and go tomanage your account > Password and Security.
I'm able to do this, others say they need to input answers to their current security questions in order to make changes, I'm inclined to think its worth a try, you don't have anything to lose.
If that doesn't help you might try contacting Apple through Express Lane (select your country, navigate to iCloud help and enter the serial number of one of your devices)

Ex set security questions in Apple ID

My now ex apparently answered security questions in my Apple ID and used his email address as the retrieve/rescue email -anyway I can reset this? I don't know the answers to his questions.

You need to ask Apple to reset your security questions; this can be done by phoning AppleCare and asking for the Account Security team, or clicking here and picking a method, or if your country isn't listed in either article, filling out and submitting this form.
They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
(106863)

Forgot password for users for whom challenge questions are not set

Hi,
I have a scenario here where initially the environment property for force setting challenge questions during first login was not set to true.
But it has been set to true later. But for users created prior setting this property to true, the forgot password link is taking to a page to answer challenge questions which obviously is not working.
Is there anyway to handle this scenario without doing ADF customization? For example say, to force all previous users also to set challenge questions for whom the challenge questions are not set.

Hi, In your scenario, since user has forgotten his/her password and he has not set his answers to questions, so the only option left is calling Help Desk. Help desk guys should educate end users that go to OIM->My Information -> Set Security Questions. This is the only easy way I can think of.
HTH,
~Abhishek

How to call German Support from Asia to reset security question?

Dear Apple Support,
my dealer for my very first MAC computer tried to install software and update OS to prepare notebook for "reday to use"status.
It turned out that Apple has no service access to allow dealer to install and register software on customer behalf.
So I needed to give him full access to my account.
Since I'm new in this Apple things I was scared because with other OS I never ever had that requierement.
But I already confirmed my MAC order so I could not cancle and step away from Apple.
So I tried to process this request as save as possible. I removed all credit from account and gave a temporary password.
I also tried to set security question to temporary values for my dealers access.
But here something went wrong. So I ended up with obiviously unknow security question answers what blocks the access.
The instructions on the screen and some screenshots in the change settings iinstruction show different (outdated) forms.
Also the alternative approach with alternative email was not working.
Why is it not possibel to forward user request for this reset request automatically to relevant support?
I found also that the German support can't be called from abroad.
Why is this not mentioned in list of international phone numbers?
For some areas there is such a note but not for the German number!
Finally I raised a case request to call back under my number, but Apple does not allow to change the country code.
Because that way I had no chance, I ask my dealer to assist and he called Apple support in Germany, but as they found out that he was acting on my behalf they kicked him out too times without further help.
That was the moment I really regret that I spend now so much money for buying an Apple thing.
I immediately cancle the Apple Care policy. Why should I pay for somthing if not even basic support is reliable.
Apples does really good marketing, but in reality on second view when in real touch with Apple service it looks very poor.
From user interface over usability of support process and dealer service all is so weak.
Since Apple support kicked out the dealer, I called in next attempt a German person to relay my telephone request while being on Skype session.
But what we there experienced was far more unfriendly.
We picked up the call after 2-3 ring and a computer voice wellcomed us and told us that Apple was not able to reach us.
Furthermore they announced to call agian 10minutes later (10:21am MET +10min) we waited in Skype session over half an hour but no call back.
I tried than to request again a call with clear indication that they pleas have to use my abroad number.
But this results in an email answer from Apple support that they can't reach me although the number they confirmed to are correct!
My umber is also given in my data records in Apple-ID. So why is Apple support not able to escalate to second support level if something goes obviously goes wrong?
May be too much automated system administration?
After 1,5 days and many many emails, calls and endless frustration on my site and on authorized dealer side I need to escalate my simple request now over all channels I can find within the Apple universum.
ontact details are all known to you and many request emails in your inbox refer to this case. My dealer contacts I already forwarded to Apple support email.
Hey guys, I need just to get my security questions reseted! Can anybody assist please?
Please inform we when done or call me under my:
1. day number
2. evening number
3. Mobile number.
4. Apple-ID email
5. ooptional email
6. or contact my relay in Germany under the number I send to you.
PPLLLEEAASSEEEEE!

Thanks roaminggnome for reminding me on this reference,
that was one of the confusing webpages I found for this problem while using a simple search :-)
But in my case the screen looked different and the procdure even more different than described in this easy to search posting.
But don't worry Appel support also approached it in same way.
The solution for this problem was much different.
The scaring story with all this is that I had to give full account access and security question answers to a third party person helping as a relay to comunicate to Apple support.
A simple search in free forums showed me that I'm not the only one having trouble with this Apple security strategy.
Many thanks again!
Ramamara,
Send from my Motion Computing Tablet WinXP

Forcing Users to set Security Questions

Similar Messages

Maybe you are looking for