...
To enable Self Service Reset, first define a Message Template with a context of Authenticator. This is the message that will be sent to the verified email address(es), and should minimally include the (@RESET_URL) substitution. Next, enable Self Service Reset for the desired Password Authenticator configuration. Configure it with the appropriate Reset Message Template.
A Redirect URL may be specified on successful reset to send the user to an appropriate page, such as documentation, an application, or an account management page. Otherwise, the user will be sent to the Password Authenticator's password management page.
...
| Info |
|---|
Locked Authenticators cannot be reset. Similarly, Authenticators cannot be reset for CO People not in Active or Grace Period status. The search interface may still send a reset token in these circumstances, however on validation the request will be rejected. |
Username Reminder
Registry v4.1.0 introduces the ability for users to get a username reminder. This feature is disabled by default.
Username Reminder works by exposing an unauthenticated page where users may enter an identifier or verified email address. If the value matches an active CO Person record, a username reminder message will be sent to all verified Email Addresses associated with the record.
To enable Username Reminder, first define a Message Template with a context of Authenticator. This is the message that will be sent to the verified email address(es), and should minimally include the (@IDENTIFIER:x) substitution. This substitution is used to decide what value is sent to the user as the username; it is not set in the plugin configuration. Next, enable Username Reminder for the desired Password Authenticator configuration by choosing the appropriate Username Reminder Message Template.
Once enabled, the Password Authenticator configuration will render the Username Reminder URL, which is the path to the unauthenticated page used to start the username reminder process.