Educause Security Discussion mailing list archives

Re: Self-Service Password Reset Tool Recommendations


From: "Barton, Robert W." <bartonrt () LEWISU EDU>
Date: Mon, 10 Oct 2016 13:56:04 +0000

If you use Ellucian products, look at Okta.

Robert W. Barton
Director of Information Security
Lewis University
One University Parkway
Romeoville, IL  60446-2200
815-836-5663

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Boyd, 
Daniel
Sent: Monday, October 10, 2016 7:11 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Self-Service Password Reset Tool Recommendations

We use ReACT by ASPG.  It works for both our AD accounts and for our Office365 accounts.  Our constituents can reset 
both passwords at the same time or keep them separate.  I don't have any idea of the licensing costs as that is handled 
elsewhere, but we have very few issues with it.  Faculty, staff and students not only can reset their passwords, but 
also unlock their AD accounts through the portal.  On-boarding is simple and it allows unlock codes to be sent to 
alternate email addresses or via SMS texts, or the user can answer their security questions to reset their password.

It has worked well for several years now.

Dan


Daniel H. Boyd (94C)
Senior Network Architect
Network Operations
Information Security Advisory Group Chair Berry College
Phone: 706-236-1750
Fax:     706-238-5824

There are two rules to follow with your account passwords:
1. NEVER SEND YOUR PASSWORD VIA EMAIL (TO ANYONE)!!!!!
2. If unsure, consult rule #1



-----Original Message-----
From: Justin Harwood [mailto:Justin.Harwood () CPCC EDU]
Sent: Friday, October 07, 2016 3:04 PM
Subject: Self-Service Password Reset Tool Recommendations

I would like to ask this community what you all recommend for a self-service password reset tool that is used by 
students/faculty/staff?

Thank you,

Justin Harwood


________________________________

This e-mail, including any attachments, is intended only for the addressee's use and may contain confidential and 
proprietary information. If you are not the intended recipient, you are hereby notified that any retention, 
dissemination, reproduction, or use of the information contained in this e-mail is strictly prohibited. If you have 
received this e-mail by error, please delete it and immediately notify the sender. Thank you for your cooperation.

This message (including any attachments) is intended only for
the use of the individual or entity to which it is addressed and
may contain information that is non-public, proprietary,
privileged, confidential, and exempt from disclosure under
applicable law or may constitute as attorney work product.
If you are not the intended recipient, you are hereby notified
that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone at (815)-836-5950 and
(i) destroy this message if a facsimile or (ii) delete this message
immediately if this is an electronic communication.

Thank you.

Current thread: