13.6 Auditing for Self Service Password Reset

To meet compliance standards, many companies require auditing for password changes, whether the changes came from the users or the help desk. Self Service Password Reset provides an auditing solution that tracks specific events that occur in the system. It also allows you to forward events to a Syslog server for further analysis of the information.

13.6.1 Configuring Auditing

Self Service Password Reset allows you to enable and configure event alerts such as intruder alerts and fatal event alerts.

To configure the logging and auditing options, perform the following steps:

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor.

  4. Click Settings > Auditing > Audit Configuration.

  5. Select the type of events to audit. Use the help for more information.

  6. In the toolbar, click Save changes.

13.6.2 Forwarding Auditing Information

You can forward auditing events to external systems to analyze the information. Self Service Password Reset supports forwarding audit information to Sentinel, ArcSight, and syslog servers. You forward the audit events to the external systems for further analysis.

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor.

  4. Click Settings > Auditing > Audit Forwarding.

  5. Use the help to configure the audit service for Self Service Password Reset.

    NOTE:Self Service Password Reset allows specifying multiple syslog servers for fail-over purposes. If you only have one syslog server and it is not available, Self Service Password Reset queues the audit events until the syslog server is available again.

  6. In the toolbar, click Save changes.

13.6.3 Configuring Auditing for User History

Self Service Password Reset allows you to store the user history in different locations. Use the following settings to configure that storage.

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor.

  4. Click Settings > User History.

  5. Use the help to configure the audit settings for the user history.

  6. Select Save changes.