...
These pages describes how to install and configure the Password Reset application. By default it is not enabled or nor fully configured, because many installations do not require password reset functionality
...
- User initiates password reset by entering their login name.
- Password Reset application searches the user account from the password method's directory using the given login name.
- If account is found, password reset initiates authentication using Unregistered SMTP OTP or Unregistered SMS OTP method in SSO.
- User receives a One-Time-Password (via mail email or smsSMS, depending on which OTP method was used).
- User enters the received OTP in the Password Reset application.
- Password Reset application validates the OTP.
- If the OTP is correct, user then is allowed reset their password
...
Up to Ubisecure SSO 8.2 the feature of resetting a forgotten password used to be part of Password application, denoted as password/reset to separate it from the password/change, which was to fulfill a different use case of changing a remembered password. Both were implemented inside one application , Password. To make this distinction clearer, starting Starting from Ubisecure SSO 8.3 the password/change and password/reset are now two separate applications, namely Password and Password Reset. Password application's primary focus will only be the password change, while the new Password Reset application is the primary application for resetting the password.
...