You can enable users to create a new user account by clicking New User Registration on the login page of Self Service Password Reset. You can specify the attributes that the new user must have to register, and the actions that the system must perform when it creates a new user. If you want to create different profiles for different user groups, you can use the Edit List option and create different profiles. For more information about creating and configuring the profiles see, Configuring Profiles.
When a new user registration is complete, Self Service Password Reset generates a random name that is included as an LDAP name or entry ID in the LDAP directory. You can specify the appropriate value in the directory as the display name or entry ID by using the LDAP Entry ID Definition setting. The display name or the entry ID can be name, email address, or any other information that is provided in the New User Form.
NOTE:The proxy user requires additional rights to create new users through the New User Registration module. For more information, see Proxy User Rights
in the Self Service Password Reset 4.1 Installation Guide.
To configure the New User Registration module:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Modules > Public > New User Registration > default.
Configure the following settings:
Specify an LDAP context where Self Service Password Reset creates the new users.
Specify a message to display to the users before allowing them to register as a new user. You can include HTML tags in this message.
You can also configure this setting in a different language. Click Add Locale, then select the required language from the list.
Specify attributes that the users must enter while registering as a new user.
Specify the actions the system takes when it creates a user. Specify the value in the name=value pair format. You can specify multiple attributes by separating with a comma. You can also use macros. Specify a descriptive name for the action, then click OK to display the available options.
Enable this option to have Self Service Password Reset delete the new user account if the creation fails for some reason. It deletes the (potentially partially-created) “broken” account in the LDAP directory.
Specify the entry ID of the newly created LDAP entry. In some directories, this is often used as the user name, though many directories separate the concepts and values of entry ID and user name.
Values can (and usually do) include macros. In case the first value already exists in the directory, Self Service Password Reset tries each successive value until it finds a free value. Though Self Service Password Reset has not yet created the user when it evaluates the macros, the LDAP macros use the data provided on the new user form. Other macros might not be useful as there no data yet available on the user. For more information about macros, see Configuring Macros for Messages and Actions.
If you leave this field blank, the system does not generate a random user name or entry ID.
For example, in the LDAP directory, specify the value as @User:Email@ to display the display name or entry ID as the email address for the new registered user.
Enable this option to send an email to the new user's email address before Self Service Password Reset creates the account. The new user must verify receipt of the email to complete the account creation.
NOTE:You must configure and enable the Email settings to make this option work. For more information about how to configure email settings, see Configuring Email Notification Settings.
Enable this option to send an SMS to the new user's mobile phone number before Self Service Password Reset creates the account. The new user must verify receipt of the SMS to complete the account creation.
NOTE:You must configure and enable the SMS settings to make this option work. For more information about how to configure the SMS settings, see Configuring SMS Notification Settings.
Specify a user Self Service Password Reset uses as a template for the new user password policy. If the value is TESTUSER, Self Service Password Reset uses the configured test user's password policy.
Specify a delay time during a new user creation. SSPR delays the creation of the user for at least this amount of time before forwarding the user to the next activity.
Specify the value in seconds.
Specify the publicly viewable display name of this profile.
Enable the New User Registration module:
Click Modules > Public > New User Registration > New User Settings.
Enable the Enable New User Registration setting to enable the module.
In the toolbar, click Save changes.
After you have enabled and configured the New User Registration profile, the user web page now contains a new link of New user registration. Any new users can create an account for themselves through this new link.