To require a password challenge on the Change User Password and Reset User Password forms, follow these steps:
In the Administrator interface, open the Identity Manager debug page (The Identity Manager Debug Page) by typing the following URL into your browser. (You must have the Debug capability to open this page.)
The System Settings page (Identity Manager debug page) opens.
Locate the List Objects button, select UserForm from the drop-down menu, then click the ListObjects button.
The List Objects of type: UserForm page opens.
Locate the copy of the Change Password User Form that you have in production and click edit. (The Change Password User Form distributed with Identity Manager is a template and should not be modified.)
Locate the <Form> element, then go to the <Properties> element.
Add the following line inside the <Properties> element and save your changes.
<Property name=’RequiresChallenge’ value=’true’/>
Repeat steps 3 - 5, except edit the copy of the “Reset User Password Form” that you have in production.