During the login process, the login page automatically redirects users to the Challenge-Response page. Users set up the responses for challenge questions on this page. When users forget their passwords and try to reset it, Self Service Password Reset prompts for the configured questions and asks the users to specify the correct answers. When the answers match with the responses saved earlier by the users, Self Service Password Reset allows the users to reset their passwords. To configure the challenge-response policy for different profiles, see Configuring Profiles.
Apart from configuring random and required questions, you can configure a number of other important settings such as force response setup, the case of the responses, and so forth. All of these components are part of the Setup Security Questions module.
To configure the Setup Security Questions module:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Modules > Authenticated > Setup Security Questions.
Configure the settings for the Security Questions using the help.
In the toolbar, click Save changes.