Citrix workspace password reset
Looking for:
Citrix workspace password reset |
Citrix workspace password reset.How Do I Deploy Self-Service Password Reset For the First Time
Citrix workspace password reset
You need to be using LDAPs for this to work though. Shaun, I check the option for "Allow password change" and am now prompted to enter the new password. However after entering the new password the login screen will not accept it. I then went back to the web interface and found that they old password was still the password in effect because the web interface still forced me to change the password with the original password.
It seems that even though I changed the password from the Netscaler gateway, the change was not passed along. The test account i am attempting to log in as is not locked. My LDAP settings are as follows. LDAPS doesn't use port , it uses These might help you. I'm in a proof of concept right now with the product so I just need to make it function before I am concerned about security. Thanks for your input. It's not specific to NetScaler. Obviously the AD server and the Netscaler need to use the same thing!
Ok, i'll give this a try and see how it goes. Then I need to export the certificate and bring it into Netscaler. A couple of questions then regarding this.
I don't see a place in netscaler vpx for configuring a service as described in CTX SSPR server is a dedicated server and the central store is created on it. As you deploy Self-Service Password Reset for the first time, please review the hardware and software requirements at System requirements.
Then delegate read and write access to this account while creating central store. For detailed information, please refer to below section create central store. Self-Service Account Create a domain account which with sufficient privileges to unlock and reset the password of the relevant users. For detailed information, see Create a Self-Service Account. There are two ways to create a central store: manually or with a tool. Both of them will be described below and you can choose either of them.
Open PowerShell console and change directory to the folder which holds the tool. Execute CreateCentralStore. In this tutorial, the command is:. See CTX for more details about this central store creation tool. Accept the license agreement, and click Next. Important : Distribution groups and Domain Local groups in Active Directory mixed mode are not supported.
Before you create your user configurations, ensure that you already created or defined the following:. The Name User Configuration page of the User Configuration wizard allows you to associate the user configuration to the users.
If necessary, you can associate the user configuration with a different hierarchy or group later, by clicking Edit user configuration in the Actions menu. Associating user configurations to groups is supported only in Active Directory domains that use Active Directory authentication. Note: We recommend that you not include any privileged accounts for example, Local Administrators or Domain Administrators in the group of users for whom the Self-Service Password Reset account can reset passwords.
Use a new dedicated group. Self-Service Password Reset allows users to reset their Windows password and unlock their domain accounts without administrator intervention. IT administrators can add users and groups to the blacklist. Users and groups in the blacklist cannot use any of the Self-Service Password Reset features - including enrollment, account unlock, and password reset.
The Identity Verification of the Citrix Self-Service Password Reset Configuration Console provides you with a central location for managing all security questions associated with identity verification, Self-Service Password Reset, and account unlock.
You can customize your own security questions to the list of default questions and create question groups. In most instances, users see security questions displayed in the language associated with their current user profile. If the language is not available, Self-Service Password Reset displays the questions in the default language that you specify. Security answer masking provides an added level of security for your users when they register their security question answers or provide their answers during identity verification.
During the answer registration process, these users are asked to type their answers twice to avoid typing and spelling errors. Users type their answers only once during identity validation because they are prompted to retry if there is an error. Select Mask answers for security questions on the Question-Based Authentication page. You can create many different questions and designate a language for each question. You can also provide multiple translations of a single question.
If the language is not available, Self-Service Password Reset displays the questions in the default language. Note : When you specify a language for a security question, the question appears to users whose operating system settings are configured for that designated language. If the selected operating system settings do not match any of the questions available, users are shown your selected default language. Important : Use the Edit button to include the translated text of existing questions.
If you select Add Question , you are creating a new question that is not associated with the original. Adding, deleting, and replacing security questions after users are enrolled means that all users who were previously enrolled using an older set of questions cannot authenticate and reset their password until they reenroll. Users must answer the new set of questions when they open the Tasks in Citrix Workspace app. Editing a question does not force a user re-enrollment.
Important : If you are editing an existing question, be careful not to change the meaning of a question. This might cause a mismatch in user answers during reauthentication. That is, a user might provide a different answer that might not match the stored answer. You can create some security questions that your users answer to confirm their identities. Each question you add to the questionnaire must be answered by your users. However, you can also group these questions together in a security question group.
For example, putting your questions in a group enables you to add a group of six questions to your questionnaire, and allows your users to choose from that group of questions, answering, for example, three of the six.
Comments
Post a Comment