Self Service Password Reset has the ability to send emails to users warning them their passwords are about to expire. In Self Service Password Reset 4.4 or later, you can use an LDAP director or a remote database to send the password expiration notifications. Prior release of Self Service Password Reset only supported an external database.
To enable these email notifications for your users, you must properly configure Self Service Password Reset to enable and send the password expiration notifications. Use the following information to configure Self Service Password Reset to send the email notifications.
The steps for configuring Self Service Password Reset for password expiration notification are different depending on if you store the users’ information on a remote database or an LDAP directory Use the following information to configure password exploration notifications.
If you use a remote database to store the users’ information for Self Service Password Reset, you must use the following steps to configure password expiration notifications for users.
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Settings > Password Expiration Notification > Storage Mode.
Select Remote Database.
Click Settings > Application > Session Management > Node Service Enabled.
Select Enabled (True).
Click Settings > Application > Session Management > Node Service Storage Mode.
Select Remote Database.
Click Save changes.
Configure the email password notification settings in the Configuration Editor. For more information, see Enabling the Emails for Password Expiration Notifications.
If you use an LDAP directory to store the users’ information for Self Service Password Reset, you must use the following steps to configure password expiration notifications for users.
(Conditional) If you have upgraded to Self Service Password Reset 4.4, ensure that you extend the schema. For more information, see Configuring the LDAP Directories
in the Self Service Password Reset 4.4 Installation Guide.
Ensure that you have a functional LDAP test user configured. For more information, see Configuring LDAP Directory Profile.
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Settings > Password Expiration Notification > Storage Mode.
Select LDAP Directory,
Click Settings > Application > Session Management > Node Service Enabled.
Select Enabled (True).
Click Settings > Application > Session Management > Node Service Storage Mode.
Select LDAP Directory.
Click Save changes.
(Conditional) If you do not want to use the default attribute of pwdData to store the user data, you can use on the of the other attributes in your LDAP directory. To change the default attribute:
In the toolbar, click your name.
Click Configuration Editor.
Click LDAP > LDAP Directories > default > User Attributes > Application Data Attribute.
Click Add Value.
Specify the appropriate attribute, then click OK.
Click Save changes.
Configure the email password notification settings in the Configuration Editor. For more information, see Enabling the Emails for Password Expiration Notifications.
After you have configured Self Service Password Reset to use a remote database or an LDAP directory for password expiration notification, you must configure the setting to send the emails to the users. Use the following steps to send password expiration notifications to your users.
Ensure that you have enabled email notifications in the Configuration Editor. For more information, see Configuring Email Notification Settings.
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Settings > Password Expiration Notification.
Enable this option, define one or more filters to find the users that will receive the notification emails, and then define when to send the email.
Click Settings > Email > Email Templates > Password Expiration Notification Email.
Define the content of the email template that your users receive when their passwords are about to expire.
In the toolbar, click Save changes, then close the Configuration Editor.
After you have configured Self Service Password Reset for password expiration notifications, you can verify that the configuration is working. You can view the job that runs that sends the emails to your users.
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click the Home.
On the Home page, click Administration.
Click Data Analysis > Directory Reporting > Report Engine Status.
Click Start to view the report.
Click Summary to view the information about the job that ran to send the emails to the users.
(Conditional) If you are using a remote database and you have clustered Self Service Password Reset, ensure the password notification service runs on the master node of the cluster.