Create Challenge Questions

Password Challenge questions validate a person's identity by verifying personal or business-related information entered into the system in response to a series of questions and answers known only by the person. While the person controls the selection of the questions and the entry of the answers, the administrator determines the number, type, and nature of the questions that can be chosen in the enrollment and reset process.

EmpowerID supports the following types of challenge questions:

  • user created or custom

  • user selectable

  • required

  • help desk questions

The answers to the first three types are stored in a non-reversible one-way hash that cannot be decrypted. Help desk questions are stored using reversible encryption, allowing authorized help desk staff to view these questions to verify the identity of users requesting assisted password resets.

Create Password Challenge Questions

  1. On the navbar, expand Admin > Miscellaneous, and select Localized Text.

  2. Select the Localized Strings tab and then click the Add New button.

     

  3. In the Locale Key Details form that appears, enter the following information:

    • Locale Key (Unique Name) — Enter the Key Entry Name. The format for this value is PasswordManagerQuestions_LocaleKeyName, where PasswordManagerQuestions represents the Word Set or Locale Resource Set to which the Locale Key (localized text) is bound. So, for example if you are creating "What was the make and model of your first car?" as a Password Challenge question, enter PasswordManagerQuestions_What was the make and model of your car? in this field.

    • Default Value — Enter the default value for the localized text. If no additional localized text entries are created for a question, or a user does not have a Preferred Language set, the text in this Default Value field is the text that displays to the user.

    • Word Set — Select Password Manager Enrollment Questions.

  4. Click Save.



After a question is created, you must Assigning Challenge Questions before it appears to your users as a question.


Next Steps

Assign Challenge Questions

Assign Password Manager Policies

Help Desk Password Reset

Password Recovery Center Unlock

Reset Passwords

Send One-Time Passwords

Password Manager Windows Client

Â