Re: Automatic Password Resets

[Steve Schuster <sjs74 () CORNELL EDU>]

Connie,

        We are just now rolling out an on-line password reset feature.  We
are asking people to establish a shared secret mechanism much in the
way eBay and others do it.  On our password management page there is
an area that will allow people to choose questions they want to
answer.  When they need to reset their password they are able to
answer this page and answer the questions they are prompted for.

        In process and application is home-grown and we're just now starting
to roll it out across campus.

sjs

Steve Schuster
Director, IT Security Office
Cornell University
sjs74 () cornell edu




On Oct 29, 2007, at 5:06 PM, Sadler, Connie wrote:

> Is anyone doing automatic password resets? We're interested in
> minimizing the numbers of calls in to our Help Desk - especially
> for the many applicants who forget how to access our application
> initially - to get started with Brown.
>
> I know there are commercial products out there; do any of you have
> some positive experience to share about what works for you - and if
> you use something home-grown, I'd be interested in hearing about
> that as well.
>
> Thanks much!
>
> Connie
>
> Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC
> IT Security Officer, Brown University
> Campus Box 1885, Providence, RI 02912
> Connie_Sadler () Brown edu,  Office: 401-863-7266
> PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
> PGP Fingerprint: DA5F ED84 06D7 1635 4BC7 560D 9A07 80BA 91E3 8EFB