Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
devel:documentation:modules_pwd [2018/11/12 09:00]
kopro
devel:documentation:modules_pwd [2020/03/22 21:12] (current)
poulm grammar
Line 1: Line 1:
 +<- .:modules_openam | Modules: openAM authentication ^ .:start | Documentation ^ .:modules_vs | Modules: virtual systems ->
  
 +====== Modules - Password reset [pwd-reset] ======
 +
 +The module provides the functionality of password reset or, in other words, the recovery of a forgotten password.
 +{{ :devel:documentation:pwd-reset.png | Password reset process}}
 +
 +<note important>Password reset module now doesn't support SQL Server</note>
 +
 +<note important>Version before 1.7.0 doesn't set valid till to password after password reset and password generate. Is highly recommended use version 1.7.0</note>
 +
 +===== Process of restoring your forgotten password =====
 +
 +User can start the process on CzechIdM login page where is a "Forgotten password" link. In the next step, user is required to enter the account identifier. For now, identity email or login are supported and admin can use configuration property to select which of these (or both) can be used.
 +
 +CzechIdM generates validation token which is sent to the user via notification. After clicking on the link in the notification (usually email), the user is asked to fill in a new password. If password change succeeds (password validation is OK and users can change their own password), then the user can log in to CzechIdM with the new password.
 +
 +While user finished process with password reset is also set password valid till from **default password policy** configuration (password max-age attribute).
 +
 +===== Reset password in user´s system accounts =====
 +Password reset module changes user's passwords in CzechIdM or all managed systems depending on the module configuration. 
 +
 +===== Generate password =====
 +The password reset module generates a new password by default password policy for IdM and all managed systems depending on the module configuration. The form for password generate is part of the password change component.
 +
 +During password generate is also setup password valid till from **default password policy** configuration.
 +
 +
 +===== Admin tutorials =====
 +  * [[tutorial:adm:modules_pwdreset| Password reset module - installation and configuration]]