Secret questions for help desk
10.2.1.4.4.2.4. Screen flow 4: Manage secret questions and verify answers by help desk

The administrator or help-desk user can manage secret questions:

  • See the status of secret questions (valid, blocked)
  • Delete answers
  • Unblock blocked answers (answers are blocked after too many wrong answers have been provided)
  • 81033799.png

If enabled in the configuration, the administrator/help-desk employee may also verify answers. This is, for example, useful to identify a user on the phone. 

  • Verify answers by administrator/help-desk employee:
  • 81033804.png

Risks of checking answers by the administrator or help-desk employee

Note that having answers checked by the administrator or help-desk employee bears the following risks:

  • The administrator learns the secret answers to questions.
  • Identification of users using secret questions is not secure.