[ZI-PASSRECOVERY] password reset in AD + SMS

Characteristics

The user’s task remains only to define the phone number to which he will receive an authorization SMS for changing the password.

Functionality from the Admin Panel:

• Enable/Disable the “Forgot password – sms” button.
• SMS gateway configuration (external service such as: SMSAPI).
• Defining token lifetime.
• Defining text sms with token (allowing variables with values of user, token, etc.).
• Defining text message text with a new password (variable support).
• Ability to choose the domain, which is valid the ability to change the password by sms.
• Configure module activation/deactivation based on domain.
• Support for an enabled fallback – changing the password both locally and in AD, in case the password change in AD fails (e.g., by not having an account).
• Display the configuration of the connected AD or local authorization information.
• Full support for notifications about each stage of the password reset (in the admin interface) – who started the password reset, when it was completed, whether it was successful.
• Ability to define the interval for deleting notifications.

Module functionality and security:

Multi-step password change:

• Screen for email and phone number.
• Generate an authorization token and send it to the user via SMS mechanism.
• Validation screen of the specified token.
• Success information screen when changing password via sms.

• The system has safeguards against providing incorrect data.
• The system has phone number and email validation.
• The system allows you to change the password in both AD and local passwords.
• The system automatically detects the set user authorization mechanism.
• The module is fully integrated with the mail system (extension system) and allows you to go to the password change mechanism directly from the user login panel.