Adaxes

Self Service Password Reset Question

0 votes

All,

This may be somewhat of a generic question, but I've looked through a majority of the Self Service Password reset documentation and can't really find a definitive answer.

If we have users in our environment on a Mac for example, or any other flavor of OS that's not Windows, are they able to go to a URL (the one listed in the "Windows Integration section?) and if enrolled...answer their security questions and get to the password reset section? In testing I'm unable to do this...but I wanted to ask in case this is a capability and I have something mis-configured.

If I attempt to go to that URL I am sent to a login prompt, then the URL changes to the "PssEnroll.aspx" page and all I can do is answer my questions once again.

by (490 points)
0

Hello Ben,

Could you make sure that the user whose credentials you are using is enrolled to a Password Self-Service Policy?

Was the Password Self-Service Policy changed after enrolling the user to it? If the Force users affected by this policy to re-enroll when option is enabled, following the link will lead you to the enrollment page even if the user has been previously enrolled to the policy. In this case, you just need to re-enroll to the policy and try to follow the link again.
To check whether the Force users affected by this policy to re-enroll when option is enabled:

  1. Launch Adaxes Administration Console.
  2. Navigate to Configuration\Password Self-Service and select Policies.
  3. Double-click the policy in the Result Pane.
  4. Activate the Miscellaneous tab.
by (289k points)
0

Could you make sure that the user whose credentials you are using is enrolled to a Password Self-Service Policy?

You bet, I confirmed that the user having this issue (which is occuring on some of our users and a test account of mine) is enrolled in SSRP.

The "Re-Enrollment - Force users affected by this policy to re-enroll when:" is NOT checked currently either. We only have one policy configured at this time.

I'm sure it's a setting error we have on our end, so if you can think of something else to check let me know.

Thanks for the help,

by (490 points)
0

Hello Ben,

Could you make sure that Windows Authentication is disabled for this Web interface? To do so:

  1. Log in to the computer where Adaxes Web Interface is installed.
  2. Launch Internet Information Services (IIS) Manager from Control Panel \ Administrative Tools.
  3. Expand the Adaxes service node.
  4. Expand Sites and then Default Web Site nodes.
  5. Select the Web Interface node and double-click Authentication in the Right view pane.

If Windows Authentication is enabled, right-click it and click Disable in the context menu.

by (289k points)
0

Confirmed "Windows Authentication" is disabled on our SSPR site.

Just so I'm clear, should I be able to go to the URL we have configured as our "Web Interface URL" on any workstation (Windows, OS X) and if i'm enrolled login and change my password?

Thanks again,

by (490 points)
0

Hello Ben,

Just so I'm clear, should I be able to go to the URL we have configured as our "Web Interface URL" on any workstation (Windows, OS X) and if i'm enrolled login and change my password?

Yes.

Confirmed "Windows Authentication" is disabled on our SSPR site.

What browser are you using? If you are using Safari, have a look at the following article: Adaxes Web Interface Compatibility Issues with Safari.

by (289k points)
0

I'm actually on a windows laptop using either Chrome, IE, or Mozilla. I used the Mac as an example, but we are starting to allow users to use non-corporate machines so it will be both Mac or Windows machines using the link.

I have a test account I built and enrolled into our one and only password policy. I performed a "Lookup Policy for a user" search on that test account and it states the account is enrolled in the policy...and show that I enrolled it on 9/6.

If I navigate to the link presented in the windows integration piece for PW resets, I login with that test account and it brings me back to a screen that asks me to enroll. See attached.

I had a co-worker build a new test account, enroll, and try the same and he is having the same problem.

Help!

by (490 points)
0

Hello Ben,

If I navigate to the link presented in the windows integration piece for PW resets, I login with that test account and it brings me back to a screen that asks me to enroll. See attached.

There are no attachments, most probably you forgot to attach the screenshot.

by (289k points)
0

by (490 points)
0

Hello Ben,

Could you check whether there is another Password Self-Service Policy effective for the user with higher priority and to which the user is not enrolled?

Make sure that at least one of the following settings is set in the Web interface Customization Tool for the Self Service Web Interface:

  1. Do not show the Home Page option is disabled on the General tab.

  2. Disable Directory Search option is disabled on the Search tab.

  3. Disable AD Reports is disabled on the Reports tab,

  4. On the Components tab:

    • Favorites is enabled.
    • Basket is enabled.
    • At least one of the components is enabled for in the My Panel section.
by (289k points)

Please log in or register to answer this question.

Related questions

0 votes
1 answer
Force a question to be answered in password self service

Hi Team, We would like to use security based questions and answers for password resets. I have found that we can force a user to answer certain questions when enrolling, but if ... . Is there a way to ensure that a question must be answered each time? Thanks,

asked May 19, 2020 by antondubek (440 points)
0 votes
1 answer
Limit Self Service Password Reset to a Single Managed Domain

We have two on-prem domains; Domain A and Domain B. Domain A is our primary domain and syncs with Azure AD. Domain B contains accounts created for external ... user attempts to authenticate, they are only authenticating against the Domain B on-prem domain?

asked Apr 10 by awooten (80 points)
0 votes
1 answer
Local password self service reset for Windows breaks access to private keys of user certificates

Hi there, we are already successfully using the password self service via webinterface for our ad domain users. In addition to this are we in the testing phase of the password ... has the same problem and maybe can report how they solved it. Thanks in advance.

asked Oct 27, 2021 by khess (20 points)
0 votes
1 answer
Does the Self-Service Password Reset option synchronize with Azure AD Password Self-Service?

When enrolling a user for self-service with Adaxes, does this qualify them to reset their passwords via Microsoft Online as well? A lot of our SaaS products use Microsoft ... policies? I.e. Security Questions setup with Microsoft Account, MFA etc. Thanks, Dean

asked Jul 14, 2020 by dcallaghan (20 points)
0 votes
1 answer
Is Self Service Password Reset, multi factor with radius then questions possible?

We are trialing Adaxes and are wondering the following two things are possible. Is it's possible to have the order of Authentication methods adjusted ? Is it possible to import an ... 't look to exist, but would it be viable to add them as feature requests ?

asked Jul 6, 2020 by dgrandja (70 points)
3,552 questions
3,242 answers
8,243 comments
547,828 users