You can enable users to create a new user account by clicking New User Registration on the login page of Self Service Password Reset. You can specify the attributes that the new user must have to register, and the actions that the system must perform when it creates a new user. You can also create multiple profiles for a different set of users.
When a new user registration is complete, Self Service Password Reset generates a random name that is included as an LDAP name or entry ID in the LDAP directory. You can specify the desired value in the directory as the display name or entry ID by using the LDAP Entry ID Definition setting. The display name or the entry ID can be name, email address, or any other information that is provided in the New User Registration Form.
NOTE:The proxy user requires additional rights to create new users through the New User Registration module. For more information, see Proxy User Rights.
Configuring a profile for new user registration:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor > Modules > New User Registration.
Click New User Settings then on the right pane, then select Enabled to enable users to create a new user.
After enabling, users can create a new user by clicking New User Registration on the login page.
Click default.
(Conditional) If you want to create a different profiles for a different set of users:
Click Edit List, then add the profile names to the list by using Add Profile.
In the Add Value field, enter the profile name.
The profile name must have the following format:
Start with a letter (a-Z)
Contain only letters, numbers, and hyphens
Length between 2 and 15 characters
You can include multiple profiles. During authentication, Self Service Password Reset searches for the default profile first, and then the other profiles in the order mentioned.
Select the appropriate profile name.
Self Service Password Reset does not allow changing the name of the profile.
Configure the following settings:
Specify an LDAP context in which the new users is be created.
Specify a message to display to the users before allowing them to register as a new user. You can include HTML tags in this message.
Specify attributes that the users needs to enter while registering a new user.
Specify the actions the system takes when it creates a user. Specify the value in the name=value pair format. You can specify multiple attributes by separating with a comma. You can also use macros.
Select this option to delete the partially created or invalid LDAP account. This setting is used when the new user account creation fails for some reason.
Specify the display name, or entry ID that is included in the LDAP naming attribute for the new registered users. Some directories use an LDAP entry instead of a user name.
When you enable this setting, the system generates an entryID or an LDAP entry that includes random characters by default.You must specify macros for this setting. For more information about macros, see Configuring Macros for Messages and Actions.
If you leave this field blank, the system does not generate a random user name or entry ID.
For example, in the LDAP directory, specify the value as @User:Email@ to display the display name or entry ID for the new registered user as their email address.
Enable this option to send an email to the new user's email address before the account is created. The new user must verify receipt of the email to complete the account creation.
NOTE:You must configure the Email settings to make this option work. For more information about how to configure email settings, see Configuring Email Notification Settings.
Enable this option to send an SMS to the new user's mobile phone number before the account is created. The new user must verify receipt of the SMS to complete the account creation.
NOTE:You must enable SMS to make this option work. For more information about how to configure email settings, see Configuring SMS Notification Settings.
Specify a user of whose password policy template you want to use for the user’s password policy.
By default this value is set to TESTUSER, you can replace this with a distinguished name (dn) of a user whose password policy can be used for the specified profile.
Specify a time in seconds. During a new user creation process, the system waits for this specified time before sending the user to the next step.
Specify the publicly viewable display name for this profile.
Select Save changes.
After you have enabled and configured the New User Registration profile, the user web page now contains a new link of new user registration. Any new users can create an account for themselves through this new link.