Purpose

The CIAM Plus - Profile Management - Change Password - Main Flow flow presents users with an option to update their password. Users with an existing session are presented with a form that enables them to change the password associated with their account. The flow uses PingOne nodes to make the changes to the account.

Structure

This flow is divided into sections using teleport nodes:

Check for Session
Uses function nodes to set variables, then uses a PingOne node to check for an existing session.

  • If a session exists, a hidden HTML node invokes the skpolling component.

  • If no session exists, a PingOne node deletes any existing session token, then the CIAM Plus - SignOn - Subflow is invoked. When the flow completes, a PingOne node creates or updates the session.

A function node retrieves the user ID, then a PingOne node retrieves the user details. The flow then progresses to the MFA Authentication section.

When the MFA Authentication has completed, a PingOne node retrieves the user's devices and a function node examines the number of devices. If the user has zero devices, the flow progresses to the Verifying and auto enrolling the email section. If the user has one or more devices, the CIAM Plus - Agreement (ToS) - Subflow is invoked and the flow progresses to the Change Password section.

MFA Authentication
Uses a PingOne node to retrieve the user's devices, then uses a hidden HTML node to check for WebAuthn compatibility. Function nodes verify that the user has at least one active device, then a PingOne node enables MFA for the user. The CIAM Plus - Device Authentication - Subflow is invoked, then the flow returns to the Check for session section.
Verifying and auto enrolling the email
Uses a PingOne node to send a verification code, then presents an HTML page on which the user can enter the verification code. If the user submits a code, PingOne nodes validate the code, register email as an MFA device, and send a device registration email. The flow then returns to the Check for session section.
Change Password
Uses a PingOne node to find the user. If the user exists and has a password, a hidden HTML node invokes the skpolling component, then the CIAM Plus - Change Password - Subflow is invoked. If the subflow completes successfully, a PingOne node sends a password change email, an HTML success page is displayed, and the flow progresses to the Return Success section.
Return Success
Sends a JSON success message.
Return Error
Displays an error message, then sends a JSON error message.

Input schema

This flow has no inputs.

Output schema

This flow has the following outputs.

Output Name Description

ciam_errorMessage

The error message to display in the parent flow.

ciam_errorCode

The error code to display in the parent flow.

Variables

This flow uses the following variables.

Variable Name Description

ciam_magicLinkEnabled

Indicates whether magic link is enabled in your environment.

ciam_agreementEnabled

A boolean indicating whether agreement is enabled in your environment.

ciam_passwordlessRequired

A boolean indicating whether passwordless signon is required in your environment.

ciam_emailOtpEnabled

A boolean indicating whether one-time passcode using email is enabled in your environment.

ciam_fidoPasskeyEnabled

A boolean indicating whether FIDO2 passkey is enabled in your environment.

ciam_smsOtpEnabled

A boolean indicating whether one-time passcode using sms is enabled in your environment.

ciam_appleEnabled

Indicates whether authentication through Apple is enabled in your environment.

ciam_facebookEnabled

Indicates whether authentication through Facebook is enabled in your environment.

ciam_googleEnabled

Indicates whether authentication through Google is enabled in your environment.

ciam_accountRecoveryEnabled

A boolean that controls whether account recovery is enabled in your environment.

ciam_voiceOtpEnabled

A boolean indicating whether voice one-time passcodes are enabled.

ciam_totpEnabled

A boolean indicating whether TOTP is enabled.

ciam_mobilePushOtpEnabled

A boolean indicating whether mobile push one-time passcodes are enabled.

ciam_logoStyle

The HTML style to use for your company logo.

ciam_logoUrl

The URL for your company logo.

ciam_companyName

Displays the name of your company.

flowMethod

The method used to launch the flow.