product-is icon indicating copy to clipboard operation
product-is copied to clipboard

Docs: Allow user to recover password through email if the account is locked

Open nilminiwso2 opened this issue 2 years ago • 1 comments

Add the required documentation for [1].

[1] https://github.com/wso2/product-is/issues/1935

nilminiwso2 avatar Sep 18 '22 17:09 nilminiwso2

Related documentation:

[1] - https://github.com/wso2/product-is/issues/1935 [2] - https://is.docs.wso2.com/en/latest/guides/tenants/account-locking-per-user/ [3] - https://is.docs.wso2.com/en/latest/apis/user-functionality-mgt-rest-api/

nilminiwso2 avatar Sep 19 '22 05:09 nilminiwso2

The solution to the issue has been updated as follows:

  • Issue: When an account is locked, the user is unable to do anything to resolve it.
  • Solution: Disable the security-question-based password recovery option so that a user cannot continue to try to reset their password.
  • Result: instead of locking the whole account, we would lock the functionality, which would trigger an account lock.

What should be added to the doc space? The feature doc is already available [1].

  • Update the topic of the existing doc [1]. The feature specifically locks users based on the functionality - Securityquestion, and no other functionality is supported. The existing topic gives out the meaning that this can be done for any functionality that the user wants.
  • Improve the doc on how to fix the issue using the feature.

Related doc for this fix: [1] https://is.docs.wso2.com/en/latest/guides/tenants/account-locking-per-user/

divyaamunugama avatar Oct 14 '22 03:10 divyaamunugama