Setting a default password when changing passwords from the Help desk module
You can use a plugin to retrieve a pre-defined password value when the help desk performs a password change.
The plugin point is set by the GET PASSWORD EXT plugin point on the Manage the system > Maintenance > System variables configuration page.
To keep the user’s password secure, the help desk user sees only the description of the new password on the Change passwords page. The help desk user can then provide this password description to the caller. The actual password is kept secret from the help desk user , but is known to the caller from its description. For example, “the new password is the first 6 characters of the user’s social security number.”
The caller should be instructed to change their password to a different value as soon as possible, using one of the Bravura Pass self-service modules, or transparent password synchronization.
There are no shipped programs for this plugin point.
Requirements
See Writing plugins for general requirements.
Input
Input to the plugin includes only the following:
"" "" = { "sessionid" = "<session ID>" # The session ID of the logged in viewer/requester "recipient" "user" = {} # The user being assisted "viewer" "user" = {} # The help desk user providing assistance }
Output
The plugin should provide the following output:
"" "" = { "password" = "<the new password>" # The password used in the password reset "description" = "<description>" # The notice to display to the help desk user }