3 Accessing Oracle Identity Self Service
The login page is displayed when you access Identity Self Service without authenticating either natively to Oracle Identity Manager or by using SSO. The tasks you can perform before logging in to Identity Self Service include:
Note:
Challenge Question should be set by the User immediately after logging in to Identity Self Service for the first time.
3.1 Connecting to Oracle Identity Self Service
Provide correct user login and password to sign in to Oracle Identity Manager. You can successfully sign in if your login credentials are correct, and your user account is not locked or disabled.
To log in to Oracle Identity Self Service:
Note:
-
If Oracle Identity Manager is configured to support native authentication, then the login link redirects you to a form in which you can authenticate by using your Oracle Identity Manager username and password.
-
If Oracle Identity Manager is configured to support Single Sign-On (SSO), then the login link redirects you to the SSO application login page.
If you attempting to access a page, for example the Pending Approvals page, and you are checking for the pending approvals from a link and you are not logged in already, then you are redirected to the login page. Follow the login instruction provided in this section to log in to Oracle Identity Manager. However, you will be directed to the page you are attempting to access, the Pending Approvals page, instead of the main page of Identity Self Service.
3.2 Retrieving Forgotten User Login
You can click the Forgot User Login option and enter your email address to retrieve your forgotten user login.
To retrieve your forgotten user login:
3.3 Resetting Forgotten Password
User password gets locked as the result of too many invalid login attempts. You can click the Forgot Password? option to reset locked password.
The Forgot Password? option is not available in the following cases:
-
User is disabled or deleted
-
User is locked (for reasons other than, too many invalid login attempts)
-
User has not set or has set insufficient number of challenge answers
-
Applicable Challenge Policy for the user is disabled
To reset your forgotten password:
3.4 Challenge Questions and Responses After First Login
The challenge-response service allows you to set up a series of challenge questions that can be used to validate the user's identity to reset a forgotten password.
Questions and answers are stored as part of the user's profile as a name-value pair list, where the name is the question, and the value is the answer to that question. Only the user should know the correct answers to the challenge questions. For example, for user John Doe, the challenge-response set could be as follows:
Challenge | Response |
---|---|
Who was your fifth grade teacher? |
Jean Doe |
Where were you New Year’s 2000? |
New York |
What is the name of a city where you got lost? |
New York |
Where were you when you had your first kiss? |
New York |
Note:
Oracle recommends defining answers to challenge questions that cannot be guessed easily by collecting information about the user from the Internet or other public sources.
When a user's identity needs to be validated without relying on the authentication scheme, the challenge questions are asked, and the user must provide the necessary number of correct answers. Challenge questions are set in the following way:
-
The System Administrator configures a predefined set of questions. See Setting Challenge Options.
-
User configures the challenge questions and answers from the My Information page of the Identity Self Service. See Setting Challenge Questions and Responses.
-
The System Administrator and the user configures the challenge questions. The System Administrator can configure a predefined set of questions, and the user can configure the answers for these questions from the My Information tab or immediately after logging in to Identity Self Service for the first time.
3.5 Setting Challenge Questions and Responses After First Login
You can set challenge questions and responses when Identity Self Service prompts you to do so, immediately after first login.
To set the challenge questions and responses:
- Select questions from the Question 1, Question 2, and Question 3 fields.
- In the corresponding Answer 1, Answer 2, and Answer 3 fields, enter the answers.
- Click Apply.
Note:
Challenge questions and responses once set are not visible in this section. If you see the following message in the Challenge Questions section, then you have already set your challenge questions and responses:
Your secret questions and answers are already set.
You can modify the challenge questions and responses that you have already set by performing the procedure described earlier in this section.