Question
Forget password functionality in Pega 7.3
Have a requirement to provide forget password functionality to end user. I came across following proposed functionality : Provide Forgot password option on login screen and on click a dialog presented to the user and once user provide userid then mail will be triggered to user with new password. Also need forced user to change his password once reset.
I am looking for best way to implement this solution.
***Edited by Moderator Marissa to update platform capability tags; updated Product Version****
Hi Akshay,
The Two factor authentication(feature) uses OneTimePassword(OTP) which was introduced in Pega 7.3 . You can make use of this API (pxSendOTP) for one-time passwords.
You can also check below link:
https://pdn.pega.com/release-note/two-factor-authentication-one-time-passwords
To implement force change password you have the option to configure the password expiry for which you need to provide the number of days after which you want to force the change password.
https://pdn.pega.com/configuring-login-security-and-password-policies/configuring-login-security-and-password-policies
Other option is you have a checkbox of "Force change password in next login" in the security tab of the operator profile, this checkbox is mapped to a property "pyChangePasswordOnNextLogin" which is of type "TrueFalse". So if you have some requirement where you want to force the user to change the password while login based on some scenario then you can set the value of this property to true, so that while login he will get the option to change the password before login.
Regards,
Vikash