...
On the navbar, expand Password Management and click Password & Login Policies.
Click the Add New Policy button.
In the General tab of the Policy Details form that appears, enter a name and description for the policy in the Name, Display Name, and Description fields.
Set any of the optional settings explained below and click Save when finished.
...
Self-Service Password Reset Settings - Password Reset Recovery Settings
Password Manager offers a flexible workflow-based process that allows users to reset forgotten passwords and unlock their locked accounts once they have enrolled in the Password Recovery Center and supplied answers to a select number of self-identifying questions as dictated by your Password Manager policy. Depending on how you set up your Password Manager policies, you can force new users to enroll for password self-service at their initial login or allow them to make that decision themselves.
Settings | Description |
|---|---|
Enable Multifactor Reset During Recovery | Specifies whether users must go through MFA when resetting forgotten passwords. If enabled, you need to set the minimum number of LoA (level of assurance) points local and remote users must accumulate in order to reset their passwords. |
Enable Question Answer Reset During Recovery | Specifies whether users must answer their personal challenge questions when resetting forgotten passwords. If enabled, you need to configure Password Reset Enrollment Settings. |
Force Enrollment During Login | Specifies whether users must enroll for password self-service reset during their first login |
...