Secret questions for help desk
10.2.1.4.4.2.4. Screen flow 4: Manage secret questions and verify answers by help desk

The administrator or help-desk user can manage secret questions:

  • ●
    See the status of secret questions (valid, blocked)
  • ●
    Delete answers
  • ●
    Unblock blocked answers (answers are blocked after too many wrong answers have been provided)
    • 81033799.png

If enabled in the configuration, the administrator/help-desk employee may also verify answers. This is, for example, useful to identify a user on the phone. 

  • ●
    Verify answers by administrator/help-desk employee:
    • 81033804.png

Risks of checking answers by the administrator or help-desk employee

Note that having answers checked by the administrator or help-desk employee bears the following risks:

  • ●
    The administrator learns the secret answers to questions.
  • ●
    Identification of users using secret questions is not secure.