Educause Security Discussion mailing list archives

Self Service Password Reset


From: "Di Fabio, Andrea" <adifabio () NSU EDU>
Date: Wed, 4 Feb 2009 13:10:51 -0500

Experts,

I am seeking your feedback on how to implement Self Serice Password Reset.
We have just finished the development and testing of a in house, web based
password reset program.  We are now looking at how to deploy it and are
seeking feedback from institutions that already have experience with it.

Here some of the questions that we discussed and to which we are seeking
feedback.

1. Do we want to force users to register their profile and if so, what is
the best approach for doing so?
2. Is the forced registration different for existing and new faculty?  Is it
different for existing and new students?
3. Should we force our new accounts to go through a registration workflow
that includes creating the profile?  Should we do the same for existing
accounts?

One of the most discussed topic, was the "How is someone going to use the
self service password reset if they can't even logon to a PC to begin with?"
We do not have MS programmers capable of rewriting the GINA and personally I
would not feel comfortable pushing an in-house built GINA campus-wide.  Some
of the suggestions ranged from creating a guest account, using kiosks, using
your neighbor's PC, dedicating some PC in the labs to calling the helpdesk
as the last resort.

Any thoughts, ideas, comments, suggestions?

Thanks.


Attachment: smime.p7s
Description:


Current thread: