Adding a Proxy Managing Proxies

Managing Profile 8-9

5. Click Yes.

8.5 Managing Security

The Security tab allows you to change your profile attributes related to password security. Using this tab, you can perform the following tasks: ■ Changing Password ■ Setting Challenge Questions and Response

8.5.1 Changing Password

Using this feature, you can reset your enterprise password. To specify a new password, enter and re-confirm the new passwords. The new password is evaluated for compliance against the applicable password policy, which is displayed on the Change Password page. If the new password does not comply with the password policies, then the password change will be rejected and you will be informed of the failing conditions. If the password evaluates successfully against all policies, then the enterprise password is changed. To change the password:

1. Go to My Profile page, click the Security tab.

2. In the Password section, click Change Password. The Change Password window

is displayed with the applicable password policy.

3. In the Old Password field, enter the existing password.

4. In the New Password field, enter the new password that you want to set.

5. In the Re-Type New Password field, re-enter the new password.

6. Click Apply. If the old password is valid and the new password is in compliance

with the password policy, then the password is changed. Otherwise, an error message is displayed.

8.5.2 Setting Challenge Questions and Response

The challenge-response service allows you to set up a series of challenge questions that are used to validate the users identity. Only the user should know the correct answers to the challenge questions. Questions and answers are stored as part of the users profile as a name-value pair list, where the name is the question, and the value is the answer to that question. For example, for user John Doe, the challenge-response set could be as follows: Challenge Response What is your favorite color? Blue What is the name of your pet? Rex What is the city of your birth? New York Note: Oracle recommends defining answers to challenge questions that cannot be guessed easily by collecting information about the user from the Internet or other public sources. 8-10 Oracle Fusion Middleware Users Guide for Oracle Identity Manager When a users identity needs to be validated without relying on the authentication scheme, the challenge questions are asked, and the user must provide the necessary number of correct answers. Oracle Identity Manager configuration properties for this feature are as follows: ■ PCQ.USE_DEF_QUES: If Oracle Identity Manager has been customized to allow end-users to create their own challenge questions, this property specifies whether users must select their challenge questions from a predefined list, or if users should create their own challenge questions. The default value is TRUE users must select their challenge questions from a predefined list. To require users to provide their own challenge questions, set the value to FALSE. ■ PCQ.NO_OF_QUES: Sets the number of challenge questions that must be completed by a user. The default value is 3. ■ PCQ.FORCE_SET_QUES: Determines if new users must set up challenge questions upon logging into the application for the first time, or if new users can skip this step and do it later. New users are redirected to the Self.jspx page where the user can select challenge questions. This page includes a Skip button so that users can skip the challenge question set up process. ■ PCQ.NO_OF_CORRECT_ANSWERS: Represents how many questions the user must answer correctly to reset user password. To set the challenge questions and responses:

1. Go to the My Profile page and click the Security tab.

2. In the Challenge Questions section, select questions from the Question 1, Question 2, and Question 3 fields. 3. In the corresponding Answer 1, Answer 2, and Answer 3 fields, select the answers.

4. Click Apply.

8.5.2.1 Localizing Challenge Questions and Responses

The following default challenge questions are localized automatically in Oracle Identity Manager: ■ What is the name of your pet? ■ What is the city of your birth? ■ What is your favorite color? ■ What is your mothers maiden name? Localized default challenge questions are located in the xlWebAdmin_LANG.properties file. Here, LANG is the locale code. Note: Functionality that allows end-users to create their own challenge questions is not supported in the standard, out-of-the-box user interface. Note: You can access the Admin.jspx page in another tab. This is the same page for setting challenge questions in the Oracle Identity Manager Administrative and User Console by performing the password validation.