Managing Challenge Questions

A main part of account recovery is setting up challenge or security questions for user accounts. With the WSO2 Identity Server, you can set up challenge questions in different languages using one of the following methods:

The following tutorial guides you through a sample scenario of setting up a set of challenge questions for password recovery. Follow the instructions to set up.

Adding a challenge question set

1. Start the Identity Server and log in to the management console using admin/admin credentials. 

2. Navigate to the Main tab and click on Add under Challenge Questions.

3. Click Add New Challenge Question Set and fill in the following fields to add a new set of challenge questions. 

   Open

   

4. Click Add and you will be redirected to the following screen, which displays the newly added question set. 
   

Claim mapping for the challenge question set

For each challenge question set that you create, create claims to store the answers to the questions in the set. To do this, follow the steps below.

1. After clicking the Add button, the screen that appears will contain the fully qualified name of the challenge question set. In the example above, the Set Id is "Set1", therefore the fully qualified name of the set is http://wso2.org/claims/Set1.

2. Navigate to Claims>Add and click Add Local Claim.

3. Enter the following details and select the Supported by Default checkbox to map the challenge question set to a claim in the user store. Click Add. 
   
   

   • Claim URI: http://wso2.org/claims/Set1

   • Display Name: Challenge Question Set 1

   • Description: xxx

   • Mapped Attribute-User Store Domain Name: PRIMARY

   • Mapped Attribute-Mapped Attribute: location

   Open

   

Adding a challenge question

1. Click on Add under Challenge Questions and then click Add Challenge Question. 

2. Fill in the following details and click Add. 

   Open

   

3. Click Add to add the challenge questions

Add locale mapping to a question 

The first challenge question added in the example above is in English. To add the same challenge question in another language (e.g., French), follow the steps below. 

1. Login to the management console using admin/admin credentials.

2. Click on Add under Challenge Questions and then click Add Challenge Question. 

3. Select the relevant challenge question set, e.g., http://wso2.org/claims/Set1, and select Yes for the Add Locale Mapping to a question field.

4. Enter the same Challenge Question Id (Q1) and select the Challenge Question Locale as French. 

5. Enter the Q1 challenge question in French, click Add, and click Finish.
   
   

   Open

   

6. Click on the Edit button corresponding to the relevant set (http://wso2.org/claims/Set1). You will see Q1 listed twice in the two different languages as seen below. 
   
   

   Open

   

7. Click Finish.

8. Click on List under Claims and select http://wso2.org/claims.

9. Select the Locality claim and click Edit. Select the Supported by Default checkbox and click Update. 

10. Logout as admin and login as a user with user profile management permissions. 

11. Click on List under Users and Roles and then select Users. 

12. Click on the User Profile button corresponding to the logged in user. 
    
    

    Open

    

13. Enter the language code as fr_fr to set language as French for the Locality field and click Update. 

Editing/updating a challenge question

1. Log in to the management console using admin credentials. 

2. Click on List under Challenge Questions and click on the Edit button corresponding to the relevant challenge question set (http://wso2.org/claims/Set1).

3. Click on the Edit button corresponding to the challenge question you want to edit. 

4. The field will turn yellow. Edit the question and click Update to save changes.

5. Click Finish. 
   
   

   Open