This documentation is for WSO2 Identity Server 5.4.0. View documentation for the latest release.
Managing Challenge Questions - Identity Server 5.4.0 - WSO2 Documentation
||
Skip to end of metadata
Go to start of metadata

A main part of account recovery is setting up challenge or security questions for user accounts. With the WSO2 Identity Server, you can set up challenge questions in different languages using one of the following methods:

The following tutorial guides you through a sample scenario of setting up a set of challenge questions for password recovery. Follow the instructions to set up.

Adding a challenge question set

  1. Start the Identity Server and log in to the management console using admin/admin credentials. 
  2. Navigate to the Main tab and click on Add under Challenge Questions.
  3. Click Add New Challenge Question Set and fill in the following fields to add a new set of challenge questions. 

    When adding a new challenge question set, you have to add the first challenge question of the set along with it.

    FieldDescriptionSample Value
    Challenge Question Set IdThis is a text field that enables you to specify the question set Id. This Id can only contain alpha numeric characters.Set1
    Challenge Question IdThis text field allows you to enter the question Id of the first question in the set. This Id can only contain alpha numeric characters.Q1
    Challenge Question LocaleThis dropdown field enables you to select the language the challenge question will appear in. Spanish
    Add Challenge QuestionAdd the first challenge question of the set.Place of birth?

  4. Click Add and you will be redirected to the following screen, which displays the newly added question set. 

Claim mapping for the challenge question set

For each challenge question set that you create, create claims to store the answers to the questions in the set. To do this, follow the steps below.

  1. After clicking the Add button, the screen that appears will contain the fully qualified name of the challenge question set. In the example above, the Set Id is "Set1", therefore the fully qualified name of the set is http://wso2.org/claims/Set1.
  2. Navigate to Claims>Add and click Add Local Claim.
  3. Enter the following details and select the Supported by Default checkbox to map the challenge question set to a claim in the user store. Click Add. 

    Tip: Since the first challenge question of the set was "Place of birth?", in this example the mapped attribute of the PRIMARY user store is "location".

    • Claim URI: http://wso2.org/claims/Set1
    • Display Name: Challenge Question Set 1
    • Description: xxx
    • Mapped Attribute-User Store Domain Name: PRIMARY
    • Mapped Attribute-Mapped Attribute: location

Adding a challenge question

  1. Click on Add under Challenge Questions and then click Add Challenge Question
  2. Fill in the following details and click Add

    FieldDescriptionSample Value
    Challenge Question Set IdThis is a dropdown field that allows you to select the Id of the challenge question set to which the new challenge question should be added.http://wso2.org/claims/Set1
    Add Locale Mapping to a questionSelect Yes if you are adding an existing challenge question in another language.No
    Challenge Question IdThis text field enables you to enter a unique Id for the challenge question. Q2
    Challenge Question LocaleSelect the language that the challenge question is in using the dropdown. English
    Add Challenge QuestionThe challenge question.Favourite food?

  3. Click Add to add the challenge questions

Add locale mapping to a question 

The first challenge question added in the example above is in English. To add the same challenge question in another language (e.g., French), follow the steps below. 

  1. Login to the management console using admin/admin credentials.
  2. Click on Add under Challenge Questions and then click Add Challenge Question
  3. Select the relevant challenge question set, e.g., http://wso2.org/claims/Set1, and select Yes for the Add Locale Mapping to a question field.

  4. Enter the same Challenge Question Id (Q1) and select the Challenge Question Locale as French
  5. Enter the Q1 challenge question in French, click Add, and click Finish.
  6. Click on the Edit button corresponding to the relevant set (http://wso2.org/claims/Set1). You will see Q1 listed twice in the two different languages as seen below. 
  7. Click Finish.
  8. Click on List under Claims and select http://wso2.org/claims.
  9. Select the Locality claim and click Edit. Select the Supported by Default checkbox and click Update
  10. Logout as admin and login as a user with user profile management permissions. 
  11. Click on List under Users and Roles and then select Users
  12. Click on the User Profile button corresponding to the logged in user. 
  13. Enter the language code as fr_fr to set language as French for the Locality field and click Update

Try it out!

Login to the dashboard (https://localhost:9443/dashboard) as the user you configured in step 12 above, e.g.,kim, and click View Details under Account Recovery. Only the questions matching the locale set in the user profile appears (in this example, only the French question will appear).
Example:

Editing/updating a challenge question

  1. Log in to the management console using admin credentials. 
  2. Click on List under Challenge Questions and click on the Edit button corresponding to the relevant challenge question set (http://wso2.org/claims/Set1).
  3. Click on the Edit button corresponding to the challenge question you want to edit. 
  4. The field will turn yellow. Edit the question and click Update to save changes.
  5. Click Finish
  • No labels