You can configure Self Service Password Reset to allow users to search for their colleagues’ information and also configure the attributes to be displayed in the search result.
If you enable the People Search module and configure it, anyone can use the People Search option to select the appropriate user and view the user details. You can see details such as, user name, email address, photo (if specified), and an organizational chart is displayed with the details of other users who report to the selected user (in a hierarchy) and also with the details of the user’s manager. The arrow displays the user’s level in the hierarchy.
Self Service Password Reset requires that the users who use People Search have read permission to view all the attributes that the People Search module displays. Self Service Password Reset uses wildcards or Ajax search (searching and displaying results while typing).
To configure the People Search module:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor > Modules > People Search.
Configure the following settings:
Select this option to enable the People Search module.
Specify an LDAP search filter to control the users who access People Search. The user must match this LDAP filter to use this feature.
You can either select the LDAP profile that you have already defined by using the settings for LDAP Directory Profiles, or specify the domain for LDAP search filter.
You can add multiple filters and add multiple groups for the query.
Add the list of LDAP attributes that Self Service Password Reset must search when the system generates an automatic search for the setting People Search LDAP Filter. The system also uses the search attributes to determine which fields in the user detail form will show the Like search option.
Add the LDAP attributes that Self Service Password Reset displays in the search result for a user.
Add the LDAP attributes that Self Service Password Reset should display during the detail view of an individual person’s record.
Specify the maximum number of records that should be displayed in the search result.
This setting should not be enabled for security purpose, but if you require LDAP proxy account to perform searches then select Enabled.
Specify the configuration value that Self Service Password Reset displays for the user’s name. Specify the value for this setting in the @LDAP:name@ format. This setting controls how the People Search details display the user names. For example, if you want Self Service Password Reset to display the user’s first and last names then you can provide the following configuration value: @LDAP:givenName@ @LDAP:sn@.
Specify the details that must be displayed in the People Search details on the organization chart for each user.
Specify the name of the LDAP attribute that includes the photo of the LDAP users. When you specify the LDAP attribute name, the photos are uploaded from the LDAP directory.
This is an optional field. If an LDAP attribute is not specified, the People Search module does not display a photo of the user during the user search.
If user photos are not stored in LDAP, this setting can show photos from an external system. If you specified this setting, the People Search module does not load the photo from the LDAP directory.
For example: http://photos.example.com/employee/@LDAP:workforceID@.jpg
Set the interval in seconds to store the search information in cache.
Specify the query for the users who are allowed to view the photo of other users in an organization chart.
The LDAP search filter to query the directory with Substitute %USERNAME% for the user-supplied user name. If blank, the system auto-generates the search filter based on the values in the setting Search Attributes.
For example:
(&(objectClass=Person)(|(givenName=*%USERNAME%*)(sn=*%USERNAME%*)(mail=*%USERNAME%*)(telephoneNumber=*%USERNAME%*)))
Specify the LDAP search base. If you leave this field blank, the system uses the default LDAP search bases.
If you want to allow all the users to search for other users through People Search by using ipaddress/sspr/public, select Enabled.
Specify the number of seconds after which an authenticated session expires. There is no timeout for users using the People Search module without authenticating.
Specify the LDAP attribute that contains the LDAP DN of the manager. If this setting is blank, then the People Search module does not display the organizational chart view.
Specify the LDAP attribute that contains the LDAP DN of the users who directly report to the user.
Select Save changes.