Application Guide for Oracle Self-Service E-Billing (Consumer Edition) > Enrollment and Login Use Cases >
Setting a Password and Security Question
All users must create a password, security question, and answer. Table 3 lists and describes the Setting a Password and Security Question use case functions.
Table 3. Setting a Password and Security Question
|
|
Name |
Setting a Password and Security Question |
Feature Area |
Enrollment |
Primary User |
Consumer user |
Precondition |
The consumer must have completed the Self-Enrollment and received the email generated by that use case. |
Trigger |
The user clicks the HTTPS request sent in an email. |
Configuration Points |
- The number of characters in a password; Payment Card Industry (PCI) Data Security Standard requires a minimum of seven characters.
- The complexity of the password.
- The number of questions for the security question.
- The list of security questions.
|
Main Path for Setting a Password and Security Question
The main path to set a password and security question is as follows:
- The user clicks the HTTPS request sent in an email.
Oracle Self-Service E-Billing displays a form where the consumer user enters the following information:
- User Name
- Password - When a user enters a password in Oracle Self-Service E-Billing, it must contain at least eight characters (configurable) and contain at least the following (configurable):
- Confirm Password; must be the same as the previously entered password.
- Select a Security Question. Pre-Populated Drop Down (configurable)
- Best friend's name from childhood?
- The name of the boy or girl you first kissed?
- The place where you first met your spouse or significant other?
- What is the make and model type of your first car?
- What was the name of the school you attended in first grade?
- Security Answer
- The form box size is 30 for consistency.
- The minimum length of a security question is one (configurable) character and cannot be the space character.
- The maximum length of the answer is 100 characters.
- Oracle Self-Service E-Billing deletes leading and trailing spaces and does not include these in the calculation of minimum and maximum lengths.
- Spaces within the answer are valid.
- Special characters are valid and enhance the security level of the answer.
- The consumer user clicks Submit.
- Oracle Self-Service E-Billing validates the information on the form for:
- Formatting
- Completeness
- User name and validation code within HTTPS request match in Oracle Self-Service E-Billing.
- The account has not expired; four hour (configurable) time limit
- Password Requirements
- Oracle Self-Service E-Billing sets the Status Flag in the database indicating this is an active user.
- The Login page appears and displays the following message: Your security credentials have been accepted, please log in to access your billing information.
Alternate Path for Setting a Password and Security Question
This use case can have the following alternate path: The user clicks Cancel. The Login screen appears. Exceptions for Setting a Password and Security Question
Exceptions can occur with this use case. The account flag for validation has expired (the default is four hours, configurable)
Oracle Self-Service E-Billing displays a message that states: Please contact a customer service representative at xxx-xxx-xxxx to have your account reactivated, as too much time has elapsed since you initiated the enrollment process. One of the form fields is an empty string when submitted
Oracle Self-Service E-Billing displays the populated Enrollment Form with the following error message: Please provide a value for ****. The password or confirm password does not meet the requirements
Oracle Self-Service E-Billing displays the pre-populated form with the following error message: Please provide a valid password and confirm password. The password and confirm passwords are not exactly the same
Oracle Self-Service E-Billing displays the pre-populated Enrollment page with the following error message: Please provide a valid password and confirm password.
|