KBA Verification node
Presents KBA questions to the user, collects answers to those questions, and verifies the input against the user’s stored answers.
Use this node for additional authentication when resetting a forgotten password or username.
To set the number of security questions, go to Security > Security Questions > Settings in the Advanced Identity Cloud admin UI.
Availability
| Product | Available? |
|---|---|
PingOne Advanced Identity Cloud |
Yes |
PingAM (self-managed) |
Yes (1) |
Ping Advanced Identity Software (self-managed) |
Yes |
(1) This functionality requires that you configure AM as part of a Ping Advanced Identity Software deployment.
Configuration
| Property | Usage |
|---|---|
KBA Attribute |
The managed object attribute in which KBA questions and answers are stored. |
Identity Attribute |
The property used to locate the identity. |
Callbacks
The node sends a PasswordCallback for each KBA question that requires verification, prompting the user to answer the question.