Forefront Identity Manager - Credential Management, Part 1

  • Article

Background
Nowadays, for most companies, if an employee forgets his password, very likely he would need to call help desk to reset the password for him. FIM helps enterprise reduce help desk cost by providing "Self-Service Password Reset" (SSPR).

Scenario

  1. After deployment, employee will be prompted to answer a list of questions (e.g. "What's the name of your first pet") defined by system admin upon logging on to the machine.
  2. After a nice long Christmas, he goes back to work and has forgotten his password.
  3. He will be stuck at the logon screen and notice there is a new "Reset Password" link.
  4. Upon clicking on the link, he will be prompted for a list of questions he previously registered with in step (1).
  5. If he answers the questions correctly, he will be prompted to input his new password.
  6. He submits his new password (which has to be complied with the corporate policy).
  7. He can then logon to his machine with the new password and continue to work.

Screenshots

  1. Registration
    1. Welcome Screen
    2. Password Gate. It asks for your password. You don't want someone else to register for you while you are not at your machine right?
    3. QA Gate. Hm... Who is my favorite author? Let me think...
    4. That's it. Pretty easy huh.
  2. Reset
    1. I don't remember my password. Let's click on the Reset Password link in logon screen.
    2. I don't remember my first pet's name. Luckily, I do remember the others.
    3. What do I want for my new password?
    4. Wow, I can't believe it is that easy and fast.