Question
Forget password functionality in Pega 7.3
Have a requirement to provide forget password functionality to end user. I came across following proposed functionality : Provide Forgot password option on login screen and on click a dialog presented to the user and once user provide userid then mail will be triggered to user with new password. Also need forced user to change his password once reset.
I am looking for best way to implement this solution.
***Edited by Moderator Marissa to update platform capability tags; updated Product Version****
I afraid that we cannot use two factor authentication, because we have different set of user autheticated from different systems. Only one set of users who follow default Pega authentication will have this capabilities.It would be difficult to enable security profile for all users.
Please provide inputs considering above scenario. Thanks
I am still figuring out the right solution. Your inputs will be helpful.
Hello Akshay,
I am also looking for this kind of functionality where few set of users who are using Pega default authentication need to have "Forgot Password" link. Do you have any inputs on this.
Hello!
This is an old post without any recent activity.
Please create a new post to seek resolutions to your query.
If it helps, you can add this post as a reference to the new one.
Thanks,
Pallavi M | Moderator | Pega Collaboration Center
Hi Akshay,
The Two factor authentication(feature) uses OneTimePassword(OTP) which was introduced in Pega 7.3 . You can make use of this API (pxSendOTP) for one-time passwords.
You can also check below link:
https://pdn.pega.com/release-note/two-factor-authentication-one-time-passwords
To implement force change password you have the option to configure the password expiry for which you need to provide the number of days after which you want to force the change password.
https://pdn.pega.com/configuring-login-security-and-password-policies/configuring-login-security-and-password-policies
Other option is you have a checkbox of "Force change password in next login" in the security tab of the operator profile, this checkbox is mapped to a property "pyChangePasswordOnNextLogin" which is of type "TrueFalse". So if you have some requirement where you want to force the user to change the password while login based on some scenario then you can set the value of this property to true, so that while login he will get the option to change the password before login.
Regards,
Vikash