Make sure you have configured an LDAP datastore connection in PingFederate to connect to your application to enable self-service password reset.
This task covers specific configuration steps. For comprehensive instructions, see Setting up an LDAP connection in PingFederate.
An HTML Form Adapter instance is used to validate a user authentication session with a PCV and an LDAP datastore connection. This authentication mechanism allows you to customize a user's sign-on experience, such as:
- Enabling self-service password reset
- Account unlock
- Notifying users with password expiration information
- Localizable template files
To create or modify an HTML Form Adapter instance with a password credential validator (PCV) and an LDAP datastore connection for self-service password management:
and choose an HTML Form Adapter:
- In the Instance Name list, reuse an existing HTML Form Adapter.
- Click Create New Instance to create one.
Go to the IdP Adapter tab:
- Click Add New Row to 'Credential Validators' and add the PCV that's linked to your LDAP connection. Click Update.
Select the Allow Password Changes check
You must select the Allow Password Changes check box to enable password reset. If you don't enable this setting, your changes can't be saved.
- Optional: To send the user an email when their password is changed, select the Change Password Email Notification check box.
- Optional: To alert the user with an approaching password expiry message at sign on, select the Show Password Expiring Warning check box.
In the Password Reset Type row, click the
password reset method that you want to use.
- To allow a user with a locked account to unlock the account using the password reset function, select the Account Unlock check box.
To edit the templates for the HTML pages for password reset:
- Click Show Advanced Fields.
Edit the relevant template fields as needed with the appropriate HTML
If you modify and rename a template, make sure to update the template name of that specific template.
For the PingID password reset type, in the
PingID Properties field, import your PingID properties file from PingOne.
This is the same file you used to setup your PingID adapter in PingFederate.
- Configure the remaining settings as needed. Click Next.
- On the Summary tab, click Save.