Uploaded image for project: 'WORKTERRA'
  1. WORKTERRA
  2. WT-5506

Symphony Issue - Forgot Password Security QuestionS

    Details

    • Type: Support Activity
    • Status: Resolved
    • Priority: High
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None
    • Support Task Type:
      Query Resolution
    • Environment:
      Production
    • Reported by:
      White Label
    • Module:
      BenAdmin

      Description

      We got off the phone with Symphony not too long ago and received feedback that their employees are trying to use the forgot password link on login page and are being presented with two security questions that aren’t the questions they selected during the initial walk through.

      They heard it a couple of times and brushed it off as an invalid claim but heard it again from a reliable source. This person (Peggy McArdle) went through the site, selected her questions and password and made some elections. She then tried to login later using the forgot password and couldn’t answer the two questions as they weren’t the ones she selected.

      Have you guys heard of complaints of this from any other Clients? This client is using enrollers and the employee is using the enrollers computer when making elections. Does the system store IP or anything that would only allow recognition of the user id via forgot password if from same computer?

        Attachments

          Activity

          jennifer.leugers Jennifer Leugers created issue -
          samir Samir made changes -
          Field Original Value New Value
          Assignee Vijay Siddha [ vijays ] Vijayendra Shinde [ ID10506 ]
          vijayendra Vijayendra Shinde (Inactive) made changes -
          Attachment Security.PNG [ 29482 ]
          Hide
          vijayendra Vijayendra Shinde (Inactive) added a comment -

          Hi Jennifer Leugers,

          As per our discussion, please find attached snapshot named "Security.PNG' which shows employee gets proper security questions when we entered proper userid and company name.

          It might possible that employee has not entered company name OR entered wrong company name. If Company name is wrong, we show default security questions to employee. Due to this employee is getting improper questions.

          Let me know if you need more details on this.

          Thanks.

          CC: Samir, Vijay Siddha, Satya

          Show
          vijayendra Vijayendra Shinde (Inactive) added a comment - Hi Jennifer Leugers , As per our discussion, please find attached snapshot named "Security.PNG' which shows employee gets proper security questions when we entered proper userid and company name. It might possible that employee has not entered company name OR entered wrong company name. If Company name is wrong, we show default security questions to employee. Due to this employee is getting improper questions. Let me know if you need more details on this. Thanks. CC: Samir , Vijay Siddha , Satya
          vijayendra Vijayendra Shinde (Inactive) made changes -
          Assignee Vijayendra Shinde [ ID10506 ] Jennifer Leugers [ jennifer.leugers ]
          vijayendra Vijayendra Shinde (Inactive) made changes -
          Assignee Jennifer Leugers [ jennifer.leugers ] Vijayendra Shinde [ ID10506 ]
          Status Open [ 1 ] In Progress [ 3 ]
          Hide
          vijayendra Vijayendra Shinde (Inactive) added a comment -

          Details has been shared with Jennifer Leugers

          Show
          vijayendra Vijayendra Shinde (Inactive) added a comment - Details has been shared with Jennifer Leugers
          vijayendra Vijayendra Shinde (Inactive) made changes -
          Resolution Done [ 10000 ]
          Status In Progress [ 3 ] Resolved [ 5 ]
          vijayendra Vijayendra Shinde (Inactive) made changes -
          Assignee Vijayendra Shinde [ ID10506 ] Jennifer Leugers [ jennifer.leugers ]
          satyap Satya made changes -
          Environment_New Production [ 18442 ]
          Transition Time In Source Status Execution Times
          Vijayendra Shinde (Inactive) made transition -
          Open In Progress
          1h 29m 1
          Vijayendra Shinde (Inactive) made transition -
          In Progress Resolved
          39s 1

            People

            Assignee:
            jennifer.leugers Jennifer Leugers
            Reporter:
            jennifer.leugers Jennifer Leugers
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: