To Set Up Authentication in an Account Policy

1. Click Security in the main menu, and then click Policies.

2. Select “Default Identity Manager Account Policy” from the list of policies.

   Authentication selections are offered in the Secondary Authentication Policy Options area of the page.

   Important! When first set up, the user should log in to the User interface and provide initial answers to his authentication questions. If these answers are not set, the user cannot successfully log in without his password.

   The authentication question policy determines what happens when a user clicks on the Forgot Your Password? button on the login page or when accessing the Change My Answers page. User Authentication describes each option.

   Option	Description
   All	Requires the user to answer all policy-defined and personalized questions.
   Any	Identity Manager displays all policy-defined and personalized questions. You must specify how many questions the user must answer.
   Next	Requires the user to answer all possible policy-defined questions the first time that user logs in.   If the user clicks the Forgot Your Password? button during login, Identity Manager displays the first question. If the user answers incorrectly, Identity Manager displays the next question, and so on until the user answers an authentication question correctly and logs in, or is locked out based on the specified failure attempts limit. User-generated questions are not supported for this policy.
   Random	Allows the administrator to specify how many questions the user must answer. Identity Manager randomly selects and displays the specified number of questions from the list of questions defined in the policy as well as those the user has defined. The user must answer all questions displayed.
   Round robin	Identity Manager selects the next question from the list of configured questions and assigns this question to the user. The first user is assigned the first question in the list of authentication questions, and the second user is assigned the second question. This pattern continues until the number of questions is exceeded. At that point, questions are assigned to users in sequential order. For example, if there are 10 questions, the 11th and 21st users are assigned the first question.  The selected question is the only one that is displayed. If you want the user to answer a different question every time, use the Random policy and set the number of questions to 1.  Users cannot define their own authentication questions. See Personalized Authentication Questions for more information about this feature.

   You can verify your authentication choices by logging in to the Identity Manager User interface, clicking the Forgot Your Password? button, and answering the presented question or questions.

   Figure 3–8 shows an example of the User Account Authentication screen.

   Figure 3–8 User Account Authentication