Mapping Security Questions

Owned by Enterprise IT
May 10, 2024

On the SECURITY QUESTION MAPPING page, you can configure the settings for the Security Questions (see: Configuring Security Questions). You can also map the Security Questions specific to SummitAI web application and SummitAI Mobile App.

To map Security Questions:

  1. Select Admin > Advanced > Password Management > Security Question Mapping.
  2. On the SECURITY QUESTION MAPPING page, specify the required details. For more information about the fields on the SECURITY QUESTION MAPPING page, see Field Description.
  3. Click SUBMIT.


    Figure: SECURITY QUESTION MAPPING page

Field Description

The following table describes the fields on the SECURITY QUESTION MAPPING page.

Fields

Description

WEB PORTAL

Inform

Select the corresponding button to send the new password to the selected user.

  • Manager: If selected, the newly created password is sent to End User's manager after resetting the password. For account unlock, the account gets unlocked and the End User can use the account. The End User's manager receives a notification e-mail.
  • Self: If selected, the End User receives the new password after the password is reset. For account unlock, the End User can unlock the account.

Inform By

Select the medium through which the new password should be sent.

  • E-mail: Select the option to e-mail the password.
  • Short Service Message(SMS): Select the option to send an SMS to the specified mobile number.

Enable CAPTCHA

Select the check box to enable CAPTCHA.

No. of Questions to Display

Specify the number of Security Questions to be displayed for resetting password or unlocking account.

OTP Configuration For

Select the OTP configuration for password reset and account unlock. OTP is a One-Time Password sent to registered mobile numbers with an expiry and is more secured.

  • End User: If selected, the End Users can reset password (see: Reset Password) or unlock their accounts (see: Unlock Account) using the OTP sent to their registered mobile numbers.
  • Admin: If selected, the Administrators get the option to Master Reset (see: Master Reset) or Master Unlock (see: Master Unlock) using OTPs. The OTP is sent to the End User's registered mobile number. The End User needs to share the OTP (before it expires) with the Admin for the Admin to complete the Master Reset or Master Unlock.

Enable OTP

If selected, the OTP option is available to the End Users or Administrators to reset passwords or unlock accounts (based on the selection made for the OTP Configuration For field).

OTP Expiry

Specify the duration of OTP expiry in minutes. 

Active

Indicates the status of the Security Question Mapping configuration for the Web Application:

  • If selected the Security Question Mapping configuration becomes active on the Web Application.
  • If not selected, the Security Question Mapping configuration becomes inactive on the Web Application.

MOBILE APP

Inform

Select the corresponding button to send the new password to the selected user:

  • Manager: If selected, the newly created password is sent to End User's manager after resetting the password. For account unlock, the End User can unlock the account and the manager receives a notification e-mail.
  • Self: If selected, the End User received the new password after the password is reset. For account unlock, the End User can unlock the account.

Inform By

Select the medium through which the new password should be sent.

  • E-mail: Select the option to e-mail the password.
  • Short Service Message(SMS): Select the option to send an SMS to the specified mobile number.

Enable CAPTCHA

Select the check box to enable CAPTCHA.

No. of Questions to Display

Specify the number of Security Questions to be displayed for resetting password or unlocking account.

Active

Indicates the status of the Security Question Mapping configuration for Mobile App:

  • If selected the Security Question Mapping configuration for Mobile App becomes active.
  • If not selected, the Security Question Mapping configuration for Mobile App becomes inactive.

WRONG ATTEMPTS

No. of Allowed Wrong Attempts

Specify the number of wrong password attempts allowed for the user. 

Lock Period

Specify the account lock period in hours. As per the specified duration, the account is locked. After the Lock Period is elapsed, the account gets unlocked automatically.

Inform

Select the corresponding button to inform about the wrong password password attempts to the selected user:

  • Manager: Select the option to inform the user's manager.
  • Self: Select the option to inform the user.

Inform By

Select the medium through which the information about wrong password attempts should be sent.

  • E-mail: Select the option to e-mail the information.
  • Short Service Message (SMS): Select the option to send SMS to the specified mobile number.

SELECT QUESTION

SL. No

Displays the serial number of the Security Question.

Questions

Displays the configured Security Questions.

Check box

Select the check box corresponding to the Security Question to associate with the configured Mapping Security Questions.

OTHER CONFIGURATION

Enable E-mail Acknowledgement for User

Select the check box to enable e-mail acknowledgments for the users.