Re: Authentication of remote users

[Cal Frye <cjf () CALFRYE COM>]

Gary Flynn wrote:
> Lets say you have a user that:
>
> 1) forgot their password
> 2) forgot their answers to their secret question(s)
> 3) is traveling making visiting the helpdesk impossible
>
> Lets also say asking for last four digits of SSN is
> not allowed.
>
> How do you authenticate the identity of the user and
> allow them to change their password?
Here we require they fax (or sometimes an email will do) a photocopy of
their ID card, which does not itself contain SSN data, but our internal
ID number instead.

--
Regards,
-- Cal Frye, Network Administrator, Oberlin College

   www.calfrye.com,  www.pitalabs.com

"In war, truth is the first casualty." -- Aeschylus.