Self-service password reset with Hitachi ID Password Manager

(1)Users who have forgotten a password or triggered an intruder lockout can sign into Hitachi ID Password Manager (formerly P-Synch) using other types of credentials and resolve their own problem. Non-password authentication options include security questions, voice biometrics, smart cards, hardware tokens and random PINs sent to a user's mobile phone using SMS.

Access to self-service is available from a PC web browser, from the Windows login screen, using a telephone or using the mini web browser on a smart phone.

Users can authenticate to self-service password reset or PIN reset system using any combination of the following mechanisms:

By typing their current password to a trusted system (e.g., Windows/AD, LDAP, RAC/F, etc).
By answering security questions.
Using a security token (e.g., SecurID pass-code).
Using a smart card with PKI certificate.
Using Windows-integrated authentication.
Using a SAML assertion issued by another server.
By typing a PIN that was sent to their mobile phone via SMS.
Using a combination of these mechanisms.

Watch a Movie

Locked out Windows XP user accesses password reset software

Play movie

Content:

A user has either forgotten his password or triggered an intruder lockout.
The user's PC runs Windows XP.
The user wishes to clear an intruder lockout or reset a forgotten password.

Key concepts:

Access to the self-service password reset solution (SSPR) is available as service installed on Windows XP workstations.
The password reset service is not a GINA DLL. Instead, it adds UI elements to the native GINA on the fly.
This architecture is less risky than installing a DLL into the GINA DLL chain.

User Interfaces

Self-service password reset is available from a full screen or mobile phone web browser, from the PC login prompt and from a telephone, as described here.

Self-service password reset Self-service password reset software Self-service password reset tool