10.2 Configuring Advanced Authentication to Integrate with Self Service Password Reset

To integrate Self Service Password Reset and Advanced Authentication, you must create an Event type of OAuth2 to create the integration between the two products. You must create the Event type in Advanced Authentication before configuring Self Service Password Reset. The Event type contains information you must use in Self Service Password Reset to create the OAuth2 connection.

To configure Advanced Authentication to connect to Self Service Password Reset:

  1. Log in to the Advanced Authentication Administrative Portal as an administrator.

    https://DNS-Name-AdvancedAuthentication/admin
  2. Click Event, then click Add to create a new Event for Self Service Password Reset.

    1. Use the following information to create an OAuth 2 Event type for Self Service Password Reset:

      Name

      Specify a unique name for this Event type. Ensure that you know this Event is for Self Service Password Reset.

      Is enabled

      Ensure that this option is set to ON so that the Event functions.

      Event type

      Select OAuth2 as the Event type. This must be set to OAuth2 or the connection to Self Service Password Reset does not work.

      Chains

      Select the appropriate authentication chains you want to use in your environment, then move the authentication option to the Used panel. An authentication chain is a chain of authentication methods a user must complete to authenticate to Self Service Password Reset.

      OAuth2 settings > Client ID

      Copy this client ID to use later in the Self Service Password Reset configuration.

      OAuth2 settings > Client secret

      Copy this client secret to use later in the Self Service Password Reset configuration.

      Redirect URIs, One URI per line

      Specify the Self Service Password Reset site URL with /public/oauth at the end of the URL. For example:

      https://sspr-dns-name/sspr/public/oauth

      NOTE:You can see what the Self Service Password Reset URL is by accessing the Site URL setting in the Configuration Editor here: Configuration Editor > Settings > Application > Application.

    2. Click Save, to save the OAuth2 Event type in Advanced Authentication.

  3. Click Server Options, then enable WebAuth to enable web authentications:

  4. Click Save, to save the change.

You must now configure Self Service Password Reset using the client ID and client secret to create the OAuth2 connection between the two products.