Implementing Forgotten Password Emails

Set up hints and email text to allow end users who forget their passwords to request new, randomly generated passwords.

This setup assumes that the system is configured to send emails to end users. To allow users to request new passwords, the security administrator fulfills these requirements:

  1. Configures the requirements for the replacements passwords.

    For example, specify the length and allowed characters. See Setting Password Controls

  2. Specifies an email address on the user profile.

    On the User Profile - General page, select Edit Email Addresses and add a valid email address. See Setting General User Profile Attributes.

  3. Allows emails on one of the end user's permission lists.

    On the Permission Lists - General page, select the option Allow User ID/Password to be Emailed. If this setting is not selected, the user is not allowed to receive the new password through email. If the user is allowed to receive new passwords through email, the user can request a new password. See Setting General Permissions.

  4. Creates security questions (hints) that the end user must answer to continue with the email request.

    See Creating Hints for Forgotten Passwords.

  5. Composes text for the email to send to end users who provide a valid user ID and answer the security question correctly.

    See Creating Email Text for Forgotten Passwords.

  6. Composes text for the email to send to end users who do not answer the security question correctly.

    See Creating Email Text for Incorrect Hint Responses.

  7. Sets up a web site for the end user request a replacement password.

    See Setting Up the Site for Forgotten Passwords.

When the prerequisite setup is complete, the end user who needs a new password:

  1. Chooses a security question and supplies an answer.

    The Change or Set Up Forgotten Password Help page is where users select the security question and enter their answer into the system. See Defining Answers for Forgotten Password Hints.

  2. Accesses the forgotten password page and enters their user ID.

  3. Answers the security question.

    See Requesting New Passwords