Recommended Practice for Self-Service Reset?
Hi. I'm reviewing our implementation of ADSelfService Plus.
Please can you confirm whether the set of questions provided with the product are intended for real-life use or only e.g. as sample questions for evaluation purposes? One or two of them seem weak.
Also, is there a recommended or best pratice minimum number of questions that should be answered in order to reset a password? We are using questions-only for reset and not e.g. SMS.
Thanks
OS.