To require a password challenge on the Change User Password and Reset User Password forms, follow these steps:
In the Administrator interface, open the Waveset debug page (The Waveset Debug Page) by typing the following URL into your browser. (You must have the Debug capability to open this page.)
http://<AppServerHost>:<Port>/idm/debug/session.jsp
The System Settings page (Waveset debug page) opens.
Locate the List Objects button, select UserForm from the drop-down menu, then click the ListObjects button.
The List Objects of type: UserForm page opens.
Locate the copy of the Change Password User Form that you have in production and click edit. (The Change Password User Form distributed with Waveset is a template and should not be modified.)
Locate the <Form> element, then go to the <Properties> element.
Add the following line inside the <Properties> element and save your changes.
<Property name=’RequiresChallenge’ value=’true’/>
Repeat steps 3 - 5, except edit the copy of the “Reset User Password Form” that you have in production.