How to automate user unlock for incorrect answer PSS (GRC-AC)

[rubens_muller]

Friends,

It is possible to automatically unlock a user (in Manage Password Self Service) for X minutes after exceeding the number of wrong answers in PSS (Password self Service).

Every day we have to access the list of users who missed the questions and unlock.

Tank´s

[debashish-sarma]

Hi Rubens,

What is the number of attempts and number of questions configured in the below IMG path:

SPRO-> IMG -> Governance, Risk & Compliance -> Access Control -> User Provisioning -> Maintain Password Self Service.

One way to reduce the issue of users getting locked while using PSS would be to increase the number of attempts (recommended value is 3) and to decrease the number of questions ( say for 2 as an example, if the current value is greater than 2) in the above mentioned IMG path. Make sure while doing so you don't compromise with the security of the PSS solution.

Please note it is a good approach to keep challenge response to security questions which could be otherwise a security issue. Educating end users about the importance of remembering the challenge responses or keeping a note of the challenge responses in a secured location could also be a good way to deal with this issue.

Thanks,

Debashish