Application Guide for Oracle Self-Service E-Billing (Consumer Edition) > Customer Service Representative Use Cases >
Setting a CSR Password and Security Question
CSR users must create a password, a security question, and a security answer. Table 49 lists and describes the use case functions.
Table 49. Setting a CSR Password and Security Question
|
|
Name |
Setting a CSR Password and Security Question |
Feature Area |
Enrollment |
User |
CSR administrator |
Trigger |
The CSR user clicks the HTTPS request that was sent to him or her in an email. |
Configuration Points |
- The number of characters in a password; Payment Card Industry (PCI) Data Security Standard requires a minimum of seven characters.
- The complexity of the password.
- The number of questions for the security question.
- The list of security questions.
|
Main Path for Setting a CSR Password and Security Question
The main path to set a CSR password and security question is as follows:
- Oracle Self-Service E-Billing displays a form. The user must enter:
- CSR User Name
- Password - When a user enters a password, the default is eight (configurable) characters and contains at least (configurable):
- Confirm Password - Must be the same as the password entered in the previous field.
- Select a Security Question - Pre-Populated Drop Down (Configurable):
- Best friend's name from childhood?
- The name of the boy or girl you first kissed?
- The place where you first met your spouse or significant other?
- What is the make or model type of your first car?
- What was the name of the school you attended in first grade?
- Security Answer:
- Form box size of 30 characters for consistency.
- The minimum length of a security question is one (configurable) character and cannot be the space character.
- The maximum length of the answer is 100 characters.
- Oracle Self-Service E-Billing deletes leading and trailing spaces and does not include these in the calculation of minimum and maximum lengths.
- Spaces within the answer are valid.
- Special characters are valid and enhance the security level of the answer.
- The user clicks Submit.
- Oracle Self-Service E-Billing validates the information on the form for:
- Formatting
- Completeness
- CSR user name and validation code within HTTPS request match within Oracle Self-Service E-Billing
- The account has not expired, four hour (configurable) time limit
- Password requirements
- Oracle Self-Service E-Billing sets the status flag in the database indicating this is an active CSR user.
- Oracle Self-Service E-Billing displays the following message with a link to the CSR Login page: Your security credentials have been accepted, please click here csr_login to access your billing information.
Alternate Paths for Setting a CSR Password and Security Question
The user clicks Cancel and Oracle Self-Service E-Billing displays the CSR Login page. Exceptions for Setting a CSR Password and Security Question
Exceptions can occur with this use case. One of the form fields is an empty string when submitted
Oracle Self-Service E-Billing displays the populated Enrollment Form with the following error message: Please provide a value for ****. The password or confirm password does not meet the requirements
Oracle Self-Service E-Billing displays the pre-populated form with the following error message: Please provide a valid password and confirm password. The password and confirm passwords are not exactly the same
Oracle Self-Service E-Billing displays the pre-populated Enrollment Form with the following error message: Please provide a valid password and confirm password.
|