iSecurity Password-Reset Training

Password Reset- Features Summary Web & Green Screen interface User identify verification based upon Class (Manager, Agent, Help Desk) Supports assistance from Help Desk without compromising security Supports importing corporate HR files to pre-populate user identity info Supports multi-lingual and user-defined questions Full audit trail and reporting Integrates with other iSecurity products: User Management, Replication, Provisioning, Central Administration, Report Generator & Scheduler

Password Reset- A Self-Service, Reliable Solution Simple to use and administrate: Web and Green screen user interface Green screen administration Adjustable per the class (i.e. sensitivity) of the user. Ensures that the user is who they say they are, prior to disclosing the personally entered questions. Allow Help Desk to easily assist users without compromising security or efficiency of procedures Enable the enterprise to “introduce” the product to the organization with minimum overhead: Uses existing HR data files Auto request for entering personal questions Full Report Generator

Guidelines Users are classified by “Classes” (manager, programmer, agent); each class can have different verification rules 3-Step Process: Initial Identification: Use HR info to verify the user is who they say they are (periodic changes to the process are recommended) Verify the user has access to their e-mail User defines personal questions Type and number of Verification rules is controlled per Class: By Email, By Text Message to their cell phone Number of verification types can be Either, Both or None Questions & Answers are personal and displayed only after verification. Standard questions are provided.

Password Issuing and User Enabling Passwords can be: Displayed on the screen Sent by e-mail Password Issuing/User Enabling: If user wishes - Just enable the user (retains the same password) New password is generated Password has to be entered within a specified period of time Once entered, it must be replaced Auditing Usage; Email to administrator Message to MSGQ Product log. Processed by iSecurity Report Generator & Scheduler, results as e-mail with HTML, CSV, PDF attachments, screen, print, output file, etc.

Password Reset Workflow Forgot Password? Self Authentication Help Desk Sign on with FORGOT / PASSWORD Answer Personal Identification Questions Receive email with Temporary Password Receive email with Validation Code Enter Temporary Password and specify New Password Enter Validation Code Answer Personal Verification Questions (optional) Sign on with New Password

Initial Setup 1. Create the Special User FORGOTyyy 2. Define Authentication Control 3. Set the Initial Process Questions 4. Set the Initial Process Defaults 5. Customize Password Reset Messages (optional) 6. Add P-R Classes 7. Add Roles/Systems 8. Add Locations 9. Add Departments 10. Add Positions 11. Add Standard Verification Questions 12. Create New Persons 13. Add Private Questions for a Person (optional) 14. Test Password Reset

Password Reset Main Menu

1. Create the Special User FORGOTyyy yyy is language code (blanks = default) Option 71-Activation >> Option 41 Create User

System Configuration

Define Authentication Control

USRPRF Initial Program (optional)

USRPRF Initial Program (optional)

Set the Initial Process Questions

Initial Process Defaults

Initial Process Defaults

Work With Screen Text

Work With Screen Text (Customize Password Reset Messages)

Definitions Locations Departments Positions Define the locations, departments, and positions (job titles) that are used in your organization. Together, these three make up the different roles in the organization.

Definitions - Locations You can add up to 15 Locations at one time. The Locations are used to define Roles in Password Reset. You should set the location at the correct level to define the Roles for your organization; country, city, or even district.

Definitions - Departments You can add up to 15 Departments at one time. The Departments are used to define Roles in Password Reset. You should set the department at the correct level for your organization so that you can define Roles. For some organizations, defining a Finance department may be sufficient. Other organizations may need to split the Finance department into its sub-departments, such as Planning, Accounts Receivable, Accounts Payable, and so on.

Definitions - Positions You can add up to 15 Positions at one time. The Positions are used to define Roles in Password Reset. You should set the position at the correct level for your organization so that you can define Roles. For some organizations, defining a position of Driver may be sufficient. Other organizations may need to define different types of Driver, such as Fork Lift Driver, Truck Driver, Tractor Driver, and so on.

Add P-R Classes Option 11 P-R Classes

Add P-R Classes Password Reset classes define which identification procedures will be run when an attempt is made to reset a password and how the new passwords will be sent to users. Password Reset classes are used to ensure identical behavior for certain types of users, regardless of their physical location, to which department they belong, or to what job they perform. For example, you might want to have a set of identification procedures for all managers in your organization and a different set of identification procedures for all non-supervisory staff.

Add P-R Classes

Add Roles/Systems Roles are used to define which Systems are available for all User Profiles that belong to a specific combination of Location/Department/Position in your organization. This ensures that when users reset their passwords, the password is only sent to Systems to which they are allowed to work on. For example, your organization may have a separate system dedicated to each separate physical location. Alternatively, systems may be dedicated to the specific departments across locations, so that all finance departments use one system and all manufacturing departments use a different computer.

Add Roles/Systems

Add Roles/Systems

Add Roles/Systems

Work with Persons

Work with Persons

Work with Persons

Work with Persons

Add Systems for a person

Modify Person Identification Questions

Modify Person Identification Questions

Modify Person Identification Questions

Modify Person Identification Questions

Standard Questions

Standard Questions

Standard Questions

Number of questions

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The User Experience

The Administrators Experience

Reports & Queries

Reports & Queries