2018.1: Self Service Password Reset enrollment

Question

Hi,

Somehow I cannot enroll users anymore since the upgrade, I get this message:

"You cannot enroll for Password Self-Service because the policy effective for your account requires SMS verification, but you don't have the permissions necessary to update your mobile number."

The policy is set for mobile phone number verification (no security questions), the phone number is written to a custom property. The user self service security role has write permissions to this property...

Also, I disenrolled from the web interface, but the user still shows as enrolled in the adaxes console. If I click disenroll I get this message:

Anyone got any idea of what is going wrong?

Comments

Hello,

The policy is set for mobile phone number verification (no security questions), the phone number is written to a custom property. The user self service security role has write permissions to this property...

Could you post here or send us (support[at]adaxes.com) a screenshot of your SMS Settings? To take the screenshot:

1. Launch Adaxes Administration Console.
2. In the Console Tree, right-click the service node and then click Properties in the context menu.
3. Activate the SMS Settings tab.
4. Take a screenshot. We need something like the following:
   

Also, I disenrolled from the web interface, but the user still shows as enrolled in the adaxes console. If I click disenroll I get this message:

Thank you for reporting the issue. It occurs because there is actually no possibility to disenroll a user from a Password Self-Service Policy that has the Security Questions & Answers option disabled. We will fix the issue in one of the future releases.

---

Here's the screenshot for the SMS settings:

Answer 1

Hello,

It looks like you are using one of Adaxes custom attributes (e.g. CustomAttributeText1) to store mobile numbers for SMS notifications. By default, users do not have permissions to modify custom attributes of their own accounts which actually causes the issue. For information on how to grant the permissions, have a look at the following tutorial: https://www.adaxes.com/tutorials_SelfSe ... counts.htm.

For information on how to check which property has the display name Mobile Phone for Password Reset, have a look at the following help article: https://www.adaxes.com/help/?HowDoI.Man ... Names.html.

Comments

In the screenshot of my first post you can see that I have configured permissions to update the custom attribute. It was working fine before the upgrade to 2018.1, so I guess the problem must be somewhere else.

---

Hello,

Sorry for the confusion, but you also need to add the property to the form used for editing user accounts. For details, see section Customize Web Interface of the tutorial we referenced in our previous post: https://www.adaxes.com/tutorials_SelfSe ... counts.htm.

---

Yes indeed, this fixes the problem! Thanks!