Self-service and assisted account unlock
Users who have locked an account due to too many failed login attempts can use the Bravura Pass web interface to unlock their account. Help desk users can also use the web interface to unlock user accounts.
Users access the Unlock accounts (psk) module after logging into Bravura Security Fabric with a known password or with another form of authentication, such as security questions, token, or PIN. Once authenticated, users can unlock their account without calling the Help desk. If configured, Bravura Pass can automatically create tickets on a call tracking system for the event.
Click below to view a demonstration:
To implement the self-service and assisted unlock feature, you must turn on the PSK ENABLED setting under Manage the system > Modules > Self-service unlock (PSK) .
Note
Bravura Pass does not allow users to reactivate accounts that were disabled by an administrator.
Although the terminology of "unlock" can sometimes be used interchangeably with "enable", with certain systems (i.e. Active Directory) a locked account is not necessarily a disabled account. A password reset for a disabled account by default does not re-enable the account. The password can be changed, but by default it is not re-enabled. Typically an account that is disabled is disabled for a reason (i.e. a termination request).
In order for the account to be re-enabled, someone with authorization can submit a workflow request that includes an enable operation This can be achieved with a Bravura Identity license.
You can automatically enable accounts on Active Directory after password changes by enabling WINNT RESET ENABLE ACCT under Manage the system > Maintenance > Connector behavior . This is a global configuration that can be set to allow this. This settings is an "all or none" setting that affects all password resets on Active Directory/WinNT targets.
See also
Enabling and disabling user profiles for information about enabling, disabling, and unlocking user access to Bravura Security Fabric .
Unlocking Your Accounts in end user documentation describes how end users unlock their own accounts
Unlocking accounts for users in end user documentation describes how help desk users unlock other users' account
Unlocking user profiles in end user documentation demonstrates how help desk users enable, disable, and unlock user profiles