Implementation Guide for Oracle Self-Service E-Billing > Customizing User Management >

Customizing Enrollment Validation

You can configure the validation code generator and use the validation API to customize enrollment validation.

Configuring the Validation Code Generator

The characters in the verification code and its expiration time are configurable. You can configure the following constraints in the security.xma.xml file, found in the EDX_HOME\xma\config\modules\security directory (or the EDX_HOME/xma/config/modules/security directory on Windows). In the path, EDX_HOME is the directory where you installed Oracle Self-Service E-Billing. These constraints are found in the section for the IVCodeGenerator JavaBean:

• length. An integer that represents the length of the verification code. The default value is 7. The value must be equal to or larger than 7.
• exclude. A string that contains the characters that cannot appear in the verification code.
• includeSpecial. Whether the validation code can include special characters such as %$(). Value can be true or false.
• minUppercase. An integer, the validation code must contain at least this number of upper case letters.
• minLowercase. An integer, the validation code must contain at least this number of lower case letters.
• minNumber. An integer, the validation code must contain at least this number of digital characters.
• expirationTime. An integer and a unit (D means day, H means hour, M means minute). For example, 4H means the verification code expires after four hours.

Using Enrollment Validation API

The ISecurityProfileManager API provides the method checkValidationCode for validation code and security profile ID validation:

ISecurityProfileManager spManager = UserFactory.getSecurityProfileManager();

secProfile = spManager.checkValidationCode(secProfileId, validationCode);

If validate is expired, throw ValidationCodeExpireException

//ISecurityXMAService provides the method getValidationCode() to get a validation code.

LookupService lookUp = LookupServiceFactory.getInstance();

ISecurityXMAService securityXMAService = (ISecurityXMAService) lookUp.getModule("security");

IValidationCode = securityXMAService.createValidationCodeManager().getValidationCode();