To set the Challenge question options for a password policy:
In the Password Policy page, search and select the password policy that you want to open.
From the Actions menu, select Open. Alternatively, click Open on the toolbar. The password policy details page is displayed.
Note: You can also set the Challenge option at the time of creating the password policy. |
In the Challenge Options section, if Enable Challenge Policy support is enabled then the fields listed in Table 19-3 can be configured:
Table 19-3 Fields in the Challenge Option Section
Field Name | Description |
---|---|
Allowed Challenges |
This field allows you to select which set of challenge question is shown to the user. The options are: User Defined, Admin Defined, or User or Admin Defined. If User Defined is selected, then the challenge questions is set by the user. If Admin Defined is selected, then the challenge questions is selected from the list provided by the admin. If User or Admin Defined is selected, then the combination of questions is admin defined and user customized. |
Total Questions To Be Collected |
This determines the total number of challenge questions a user needs to provide at login. |
Minimum Correct Answers When Challenged |
The minimum number of correct answers the user needs to provide when he is asked the challenge questions. |
Allow Duplicate Responses |
This allows you to select if duplicate responses are allowed or not. |
Minimum Answer Length |
The minimum length of answer for the challenge questions. |
Lock User After Attempts |
The number of attempts before the user is locked if he provided wrong answers to the challenge questions. |
When Allowed Challenges is set to Admin Defined or User or Admin Defined, challenge questions have to be added. The number of challenge question is determined by Total Questions To Be Collected field.
To add questions:
Under Challenge Questions section, click Add.
Enter the challenge question in the Questions table. To include more questions, click Add.
To delete a question, select the question and click Delete.
Click Apply to save the password policy changes.