8.5 Enabling User Activation

The User Activation module allows first-time users to activate their account and set a temporary password. When users create an account that does not have an established channel to send the passwords to the users, this feature helps the users activating their account. Configure the settings to allow only those users to activate the account who have never been authenticated. This behavior might differ depending on the configuration and directory type.

To enable user activation:

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor > Modules > User Activation.

  4. Configure the following settings:

    Enable User Activation

    Enable this option allows users to activate their accounts by clicking Activate Account on the login page.

    Token Send Methods

    Select a method for sending token code the user. The available methods include:

    • None: The system does not perform a token verification

    • Email Only: Send to email address

    • SMS Only: Send through SMS

    • Both: Send token to both email and SMS

    • Email First: Try to send token through email; if no email address is available, send through SMS

    • SMS First: Try to send token through SMS; if no SMS number is available, send through email

    Activate User Agreement Message

    Specify a message to display to users before they activate their account. You can include HTML tags in the message.

    If you leave this field blank, the system does not display the Activate User Agreement message.

    Activate User Form

    Specify the attributes a user requires to provide during user activation.

    Activate Search Filter

    Specify a filter to find users during user activation. Include each attribute configured in Activate User Form in the search filter. Strings encoded with a percent sign (%) are replaced with values supplied by the user.

    For example, if Activate User Form includes cn and sn attributes, the filter would be (&(objectClass=person)(cn=%cn%)(sn=%sn%)).

    Activation Query Match

    Specify a query.

    The system allows only those users to activate the account who match this query, have never been authenticated, and are enabled to activate.

    You can use any attribute to configure this option. The default attribute is (&(objectclass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(|(lastLogon=0)(!(lastLogonTimestamp=*)))).

    Activation Actions (Before Password Change)

    Specify the actions that the system executes before the user configures a password post-activation. You can use macros. Specify a descriptive name for the action, then click OK to display the available options.

    Post-Activation Actions (After Password Change)

    Specify the actions that the system executes after users activate their accounts and set their initial passwords. You can use macros. Specify a descriptive name for the action, then click OK to display the available options.

  5. Select Save changes.