Summary
When a user begins using Password Manager for the first time, they may be required to define secondary credentials by selecting an identity verification question (also referred to as a user question in previous versions of Password Manager) and providing an answer to this question. The combination of question and answer is known as the identity verification phrase
In Password Manager, end users can choose from console defined questions or the default question. Since the default question does not provide the user with any clue as to what the answer might have been, some administrators see this as a source of confusion. Disabling this question will allow administrators to further customize the user experience by controlling the set of questions that the user can choose from.
Administrators must be careful with this option as it may prevent existing users from authenticating to the agent. When a user is challenged to answer their identity verification question and their chosen question is no longer defined or no longer available, they will be unable to authenticate themselves to Password Manager. Because of this, it is important to disable this default question before users begin using the agent. This will ensure that you are not disabling an existing user’s identity verification question. If the administrator disables the default question without creating or enabling any custom questions, the User configuration cannot get created. Password Manager users must belong to a User configuration.
To Disable the Default Identity Verification Question
From the Access Management Console, choose User Configuration > “your chosen configuration” > Edit User configuration > Secondary Data Protection. Uncheck “Use identity verification as in previous versions of Password Manager”
More Information
See Advanced Concepts Guide - Citrix Presentation Server, Platinum Edition - for a list of additional Advanced Concepts Guide articles.
