10.2 Configuring Advanced Authentication to Integrate with Self Service Password Reset

To integrate Self Service Password Reset and Advanced Authentication, you must create an Event type of OAuth2 to create the integration between the two products. You must create the Event type in Advanced Authentication before configuring Self Service Password Reset. The Event type contains information you must use in Self Service Password Reset to create the OAuth2 connection.

To configure Advanced Authentication to connect to Self Service Password Reset:

  1. Log in to the Advanced Authentication Administrative Portal as an administrator.

    https://DNS-Name-AdvancedAuthentication/admin
  2. Click Event, then click Add to create a new Event for Self Service Password Reset.

  3. Use the following information to create an OAuth 2 Event type for Self Service Password Reset:

    Name

    Specify a unique name for this Event type. Ensure that you know this Event is for Self Service Password Reset.

    Is enabled

    Ensure that this option is set to ON so that the Event functions.

    Event type

    Select OAuth2 as the Event type. This must be set to OAuth2 or the connection to Self Service Password Reset does not work.

    Chains

    Select the appropriate authentication chains you want to use in your environment, then move the authentication option to the Used panel. An authentication chain is a chain of authentication methods a user must complete to authenticate to Self Service Password Reset.

    OAuth2 settings > Client ID

    Copy this client ID to use later in the Self Service Password Reset configuration.

    OAuth2 settings > Client secret

    Copy this client secret to use later in the Self Service Password Reset configuration.

    Redirect URIs, One URI per line

    Use the value of the Self Service Password Reset site URL with /public/oauth at the end of the URL for the value of this option. For example:

    https://sspr-dns-name/sspr/public/oauth
  4. Click Save, to save the OAuth2 Event type in Advanced Authentication.

You must now configure Self Service Password Reset using the client ID and client secret to create the OAuth2 connection between the two products.