Password Reset verifications

Implements a self-service Password Reset model with questions that are included with the base system or custom questions that the admin defines. While enrolling for the process, the user decides which questions to provide answers for. Questions are presented in the language that the user requested during login.When a user requests a password reset, the system poses a specified number of the questions that the user selected during enrollment. The user must answer all questions correctly to verify their identity.

For information on the user enrollment experience, see Enroll for the Password Reset program using questions and answers.

This verification is based on the Security Questions verification type.

This verification relies on auto-generated code numbers. You typically implement email verification as a self-service Password Reset model.When a user requests a password reset, the system sends a verification code to an email address that the user authorized during enrollment. To verify identity, the user then submits the code on the Password Reset Verify page.

For information on the user enrollment experience, see Enroll for the Password Reset program using emailed codes.

The Password Reset Windows Application supports email verification.

This verification is based on the Email Code verification type.

By default, a six-digit email verification code is sent to the user through email. The code expires in 10 minutes. Users can attempt to send another code after two minutes. A maximum of 10 email verification codes can be sent to a user in one day.

Implements a self-service or service desk-assisted Password Reset model that relies on auto-generated code numbers. When a user requests a password reset, the system sends a code to an SMS-capable device that the user has authorized. To verify identity, the user then submits the code on the Password Reset Verify page.

You can use the ServiceNow Notify feature to send the codes.

For information on the user enrollment experience, see Enroll for the Password Reset program using SMS codes.

This verification is based on the SMS Code verification type.

When users enroll for email or SMS verification on the Password Reset Enrollment page, they get a code to verify their email address or device. After the users enter the code and select Verify, an associated record is automatically created in the Password Reset Enrollment for Verifications [pwd_enrollment] table even before they select Submit.

By default, a six-digit verification code is sent to the user's mobile device. The code expires in five minutes. Users can attempt to send another SMS verification code to the device after two minutes. A maximum of 10 codes can be sent to a particular device in one day.

Note: While the record is created automatically in the Password Reset Enrollment for Verifications [pwd_enrollment] table for the email or SMS verification, the associated enrollment check script doesn’t get processed unless users select Submit.

Implements a self-service Password Reset model that relies on user information that is available in the user profile on the instance.This verification is based on the Personal Data Confirmation verification type.

Note: Users can't configure this verification for the processes with the active public access.