You can configure the Advanced Authentication settings so that all the Advanced Authentication web service details are registered in the Self Service Password Reset system. This helps the Advanced Authentication users to use any authentication method for resetting their password. If users enroll the device for authentication in Advanced Authentication, they can choose the specified method to reset their password during a forgotten password process.
To enable Advanced Authentication users to reset their passwords during the forgotten password process:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor > Settings > NAAF.
Configure the following settings:
Specify the URL for Advanced Authentication appliance web service. For example, https://www.example.com/api/v1
Click Import From Server to import the certificate for using the Advanced Authentication services.
Click Add Value to include the user identifier that is specified in the Advanced Authentication web service. The value must be specified in the format of repository\user name. You can also use macros instead of a user name.
Select the required methods for the users specified in Advanced Authentication User Identifier.
The Advanced Authentication users must enroll their devices depending on the authentication method. Otherwise, they cannot use their devices to authenticate during the forgotten password process.
Click Save changes.