Modules - Password reset [pwd-reset]
The module provides the functionality of password reset or, in other words, the recovery of a forgotten password.
Process of restoring your forgotten password
User can start the process on CzechIdM login page where is a "Forgotten password" link. In the next step, user is required to enter the account identifier. For now, identity email or login are supported and admin can use configuration property to select which of these (or both) can be used.
CzechIdM generates validation token which is sent to the user via notification. After clicking on the link in the notification (usually email), the user is asked to fill in a new password. If password change succeeds (password validation is OK and users can change their own password), then the user can log in to CzechIdM with the new password.
While user finished process with password reset is also set password valid till from default password policy configuration (password max-age attribute).
Reset password in user´s system accounts
Password reset module changes user's passwords in CzechIdM or all managed systems depending on the module configuration.
Generate password
The password reset module generates a new password by default password policy for IdM and all managed systems depending on the module configuration. The form for password generate is part of the password change component.
During password generate is also setup password valid till from default password policy configuration.