The 10.2.1.4. Password reset self-service asks for answers to verify the entered user name. Secret questions are one of several means that can be used to verify the username.
- ●Step 1: Start password reset self-service on the login page (no screenshot)
- ●Step 2: Enter user name:
- ●Step 3: Answer randomly chosen questions.
- ●Step 4: Proceed with password reset self-service (no screenshot).
Stealth Mode
Note that the system asks for answers even if the user does not exist! This is done to not reveal information about existing and non-existing user names.