Re: Authentication of remote users

[Robert Paterson <rpaterson () SALEMSTATE EDU>]

How does your bank? Best, Rob
 
Dr. Robert Paterson
Chief Information Officer
Salem State College
Salem MA 01970
robert.paterson () salemstate edu 
978-542-6446

> > > On 1/3/2008 at 12:40 PM, in message <477D1E2B.5060100 () jmu edu>, Gary Flynn <flynngn () JMU EDU> wrote:


Lets say you have a user that:

1) forgot their password
2) forgot their answers to their secret question(s)
3) is traveling making visiting the helpdesk impossible

Lets also say asking for last four digits of SSN is
not allowed.

How do you authenticate the identity of the user and
allow them to change their password?


-- 
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security