5:13 a.m.
Hi all,
If security question option is enabled in the login flow, then the user has to save answer
to it (Default question: “What is your mother’s name?”). This question is asked to user in
the event of “forget password” for additional level of security. However, in the current
system, there is provision of storing only one security Q&A. I am looking to modify
this to include the following:
Could this functionality be extended to include 3 security Q&As which is popular
practice. I modified the keycloak secret-question.ftl to include 2 more questions. But
there is no way to store the additional questions and answers extracted from the ui form
in the UserCredentialValueModel (SecretQuestionRequiredAction.java).
The security questions are not fixed i.e. a dropdown menu of questions will be displayed
to users and they will be able to select whichever questions they want to.
Does keycloak support storing of multiple security Q&As for a user? Has anyone tried
this before?
Thank you,
Riddhi Rathod
6:28 a.m.
Hi, I think Marko answered it last month
http://lists.jboss.org/pipermail/keycloak-user/2016-February/004801.html.
Not sure if it helps to your case.
On Tue, Mar 1, 2016 at 1:14 AM Riddhi Rathod <RRathod(a)carbonite.com> wrote:
Hi all,
If security question option is enabled in the login flow, then the user
has to save answer to it (Default question: “What is your mother’s name?”).
This question is asked to user in the event of “forget password” for
additional level of security. However, in the current system, there is
provision of storing only one security Q&A. I am looking to modify this to
include the following:
Could this functionality be extended to include 3 security Q&As which is
popular practice. I modified the keycloak secret-question.ftl to include 2
more questions. But there is no way to store the additional questions and
answers extracted from the ui form in the UserCredentialValueModel
(SecretQuestionRequiredAction.java).
The security questions are not fixed i.e. a dropdown menu of questions
will be displayed to users and they will be able to select whichever
questions they want to.
Does keycloak support storing of multiple security Q&As for a user? Has
anyone tried this before?
Thank you,
Riddhi Rathod
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
3:53 p.m.
This would be of interest to me too. Riddhi, if you do a custom
implementation for this purpose, might you be willing to blog about it?
On Tue, Mar 1, 2016, at 12:28 AM, Bruno Oliveira wrote:
Hi, I think Marko answered it last month
http://lists.jboss.org/pipermail/keycloak-user/2016-February/004801.html.
Not sure if it helps to your case.
On Tue, Mar 1, 2016 at 1:14 AM Riddhi Rathod
<RRathod(a)carbonite.com> wrote:
> Hi all,
>
> If security question option is enabled in the login flow, then the
> user has to save answer to it (Default question: “What is your
> mother’s name?”). This question is asked to user in the event of
> “forget password” for additional level of security. However,
in the current
system, there is provision of storing only one security
Q&A. I am looking to modify this to include the following:
>
> Could this functionality be extended to include 3 security Q&As which
> is popular practice. I modified the keycloak secret-question.ftl to
> include 2 more questions. But there is no way to store the additional
> questions and answers extracted from the ui
form in the
UserCredentialValueModel
(SecretQuestionRequiredAction.java).
> The security questions are not fixed i.e. a dropdown menu of
> questions will be displayed to users and they will be able to select
> whichever questions they want to.
>
> Does keycloak support storing of multiple security Q&As for a user?
> Has anyone tried this before?
>
>
> Thank you, Riddhi Rathod
>
> _______________________________________________
>
keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
_________________________________________________
keycloak-user mailing list keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
--
Aikeaguinea
aikeaguinea(a)xsmail.com
--
http://www.fastmail.com - Same, same, but different...
1:29 p.m.
The security questions option you are referring to is only an example on
how you can implement your own. It's not a built-in feature of Keycloak,
nor is it aimed for use as is. It's intended to be simple and focus on
showing how to write a custom authenticator, so with that in mind 1
question makes more sense than 3.
On 1 March 2016 at 05:13, Riddhi Rathod <RRathod(a)carbonite.com> wrote:
Hi all,
If security question option is enabled in the login flow, then the user
has to save answer to it (Default question: “What is your mother’s name?”).
This question is asked to user in the event of “forget password” for
additional level of security. However, in the current system, there is
provision of storing only one security Q&A. I am looking to modify this to
include the following:
Could this functionality be extended to include 3 security Q&As which is
popular practice. I modified the keycloak secret-question.ftl to include 2
more questions. But there is no way to store the additional questions and
answers extracted from the ui form in the UserCredentialValueModel
(SecretQuestionRequiredAction.java).
The security questions are not fixed i.e. a dropdown menu of questions
will be displayed to users and they will be able to select whichever
questions they want to.
Does keycloak support storing of multiple security Q&As for a user? Has
anyone tried this before?
Thank you,
Riddhi Rathod
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
2984
days inactive
2985
days old
3 comments
4 participants
participants (4)
-
Aikeaguinea -
Bruno Oliveira -
Riddhi Rathod -
Stian Thorgersen