Configure password reset

In this tutorial, you will learn how to configure password reset in Adaxes web interface. You can, for example, specify how to generate the initial password, specify which account options are selected by default, whether unlocking accounts is allowed, and so on.

  1. Open Adaxes web interface configurator.

     How

    • On the computer where web interface configurator is installed, open Windows Start menu.

    • Click Adaxes Web Interface Configurator.

    To configure the web interface, you need to have the appropriate permissions.

     Permissions

    The permissions to configure the web interface are delegated via security roles. By default, only service administrators have the appropriate permissions. To enable other users to configure the web interface, grant them the corresponding permissions.

    To create a security role that grants the permissions to configure web interface:

    • In Adaxes administration console, right-click your Adaxes service, point to New and click Security Role.

    • Enter a name for the new security role and click Next.

    • On the Permissions step, click the down arrow embedded into the Add button and click Configure Web Interface.

    • Click Next and follow the steps in the wizard.

  2. In the top left corner, select the web interface you want to customize.

  3. In the left navigation menu, click Management.

  4. In the Operations section, select Reset password.

  5. Activate the Configuration tab and customize the operation.

     Default new password

    The New password field will be pre-populated with this value.

    • If you want the password to be different, depending on the target user, use value references (e.g. %department%, %employeeID%). Value references will be replaced with the corresponding property values of the user account.

      You can also generate a random password. For example, %adm-RandomString,12% can be used to set the default password to a random string of 12 characters in length.

    • To forbid changing the default password, select the Read-only option.

     Available actions

    • Generate
      Allows generating a random password that meets complexity requirements of the password policy assigned to the user.

    • Spell out
      Allows viewing the new password spelled out using the phonetic alphabet. You can change the default phonetic alphabet should you need to. For details, see Configure password spell out.

     Additional operations

    • Unlock account – allows unlocking accounts when resetting passwords.

    • Send SMS verification code – allows sending an SMS code to the user's phone. The same code will be displayed in the web interface for the person resetting the password.

      You need to configure SMS settings for Adaxes service to be able to send SMS messages. For details, see Configure SMS settings.

     Account options

    The Account options checkbox determines whether password-related account options will be displayed when resetting passwords.

    • Click Configure next to this checkbox to configure what options are displayed.

    • To allow changing only the Must change password at logon option, select Only 'Must change password at logon'.

      • In the Default value section, specify whether the option will be selected by default.

      • To prevent users from changing the default value, select the Read-only checkbox.

      • Alternatively, clear the Visible checkbox to hide account options from the form while still applying the default value when a password is reset.

    • To allow changing all password-related account options, select All password-related options.

      In the Default value section, specify the account options to be selected by default.

      The configured default values will be ignored if the Use current values as defaults option is selected and the password is reset for a single user. The user's current account options will be used as default instead.

     Prompt for operation reason

    If you enable this option, users will be able to provide a reason every time they reset a password using the Reset password operation.

    You can also customize the prompt to request for specific information of another kind, like a ticket number. The provided information will be visible to the operation approver (if approval is required), and will be preserved in the operation log record.

    For more details about configuring this option, see Configure and organize operations.

     Customize success step

    If you enable this option, users will see your custom message instead of a generic success message when a password reset succeeds or is sent for approval.

    You can make the message text depend on the user whose password is being reset. To do this, you need to use value references in the message template. For example, %mail% will be replaced with the Email property value of the user account whose password is being reset.

  6. Optionally, you can place a custom message on the password reset page.

     Screenshot: Custom message { #screenshot-custommessage}

    • Activate the Custom message tab.

    • Select the Display custom message checkbox.

    • Specify the message text below.

  7. Save the changes.

    Section settings can be applied to other web interface configurations. Click the down arrow button in the top right corner of the section and then click Apply to other web interfaces.

     View screenshot

Reset password from the Actions pane

It is also possible to reset passwords from the Actions pane in Adaxes web interface.

The settings described in this tutorial will be applied to all Reset password operations by default. However, actions on the Actions pane can have separate configurations that override the default settings.

For more details, see Configure Actions pane.

© Softerra 2022. All rights reserved.
Contact us