8.14 Enabling Self Service Password Reset proxy user for accessing the RESTful web services

A proxy user is a trusted individual with permissions to perform tasks on behalf of other users without revealing their identity, enhancing security and access control.

Self-Service Password Reset integrates with any REST-supporting product, allowing for external web authentications through REST.

Administrators can configure proxy user settings in the Self Service Password Reset application and grant LDAP permissions to the proxy user based on roles for accessing RESTful Web Services using REST APIs. This setup restricts direct access to user information and password management functions from anonymous users or external systems, adding an extra layer of security against unauthorized access.

When the administrator configures the LDAP proxy user with the required permissions, the proxy user can invoke the below Self Service Password Reset REST APIs to access the RESTful Web Services:

NOTE:When invoking the SSPR REST APIs on behalf of another user, you must provide the username parameter in the API call. This ensures that the API functions in the context of a specified user instead of a proxy user.

If you do not provide a username parameter, then the API will execute the operation for the proxy user.

  • Challenges

  • Check Password

  • Health

  • Profile

  • Password Policy

  • Random Password

  • Set Password

    NOTE:To execute this API, make sure the LDAP proxy user has permission to set the user password.

  • Signing Form

  • Statistics

  • Status

  • Verify One-Time-Password

  • Verify Responses

For more information about REST API, see SSPR REST API.

To enable the LDAP proxy user to access the RESTful Web Services, perform the below steps:

IMPORTANT:Create a user in your LDAP directory that Self Service Password Reset uses to access the LDAP directory. The user must have the following rights:

  • Browse users and manage password attributes of the user object

  • Create object rights in the new user container (if enabled)

For more information about how to assign the user rights, see Proxy user rights.

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor.

  4. Navigate to LDAP > LDAP Directories > default > Connection > LDAP Proxy User.

  5. Click Add Value to add the LDAP proxy user that SSPR uses to access the LDAP directory.

  6. Click Store Value in LDAP Proxy Password.

  7. Specify the LDAP proxy user password and click the Store Password button.

  8. Navigate to Settings > Web Services > REST Services > Use LDAP Proxy User for Accessing RESTful Web Services.

  9. Check the Enabled (True) check-box.

  10. Click Save changes.