Educause Security Discussion mailing list archives

Re: Authentication of remote users


From: Tom Peterson <Tom.Peterson () UNI EDU>
Date: Thu, 3 Jan 2008 14:32:47 -0600

We email or FAX for information..... then use our discretion.
-----------------------------------------------------------------------
Please supply the following information so that I can verify your
identity.  Once I receive this information I will reset your password
and send you the login information.

University ID#
Username
Home Address
Local Address
Major
date of birth
name of High School attended
*Your name (First,Last)

*Required information

You must correctly match a minimum of four in order to get your
password reset.

----------------------------------------------------

Hope this is what you're looking for.

Tom

=======================================================================
  _/    _/   _/      _/  _/_/_/ | Tom Peterson  ITS - User Services
 _/    _/   _/_/  _/_/    _/    | Director, User Services
_/    _/   _/  _/  _/    _/     | 36 ITTC (former East Gym)
_/   _/   _/    _/_/    _/       | Cedar Falls, IA 50614-0522
_/_/_/   _/      _/  _/_/_/     | (319) 273-6460  fax: (319) 273-7518
                                | Home Email: TomC.Peterson () gmail com
 University of Northern Iowa    | WWW:    http://www.uni.edu/peterson
 Email: Tom.Peterson () uni edu    |
            WebAlbum: http://picasaweb.google.com/tomc.peterson
=======================================================================



Gary Flynn said the following on 1/3/2008 11:40 AM:


Lets say you have a user that:

1) forgot their password
2) forgot their answers to their secret question(s)
3) is traveling making visiting the helpdesk impossible

Lets also say asking for last four digits of SSN is
not allowed.

How do you authenticate the identity of the user and
allow them to change their password?



Current thread: