We are evaluating Adaxes for our consulting company and for our customers as well.
Our company is fully password less today. Our production setup works with FIDO2+PIN or SSO provided by our IDP (Workspace ONE) and we federated Adaxes Trial with it with no issues.
One of the edge case we would like to support is the ability for some password less users to reset their's AD password.
This would be used when our consulting team deploy on our production setup some new services that we want to test without paying the SSO tax that some services include.
We would like to have a password reset option available from the self service portal but post authentication.
Here is the intended scenario:
- the user access the self service portal and get redirect to IDP
- IDP authenticate the user using FIDO2+PIN or SSO and redirect them to self service portal
- the portal display the user profile and an option to reset an unknown password using e-mail confirmation is visible
Is it something we can achieve with Adaxes?
Thanks a lot