Input Security Question in Self Registration for Recovery Password WSO2 IS - Solved

Question

How to customize security question for recovery password in self register. The default is in the user-portal, can it be moved to self registration? because the user will be most likely forget to input the security question. severity if the user forgets the password and there is no data security question

Answer 1

There is an option to force challenge questions to users in the login flow.

• Login to Management console.
• Navigate to Main Menu, click Resident under Identity Providers -> Account Management Policies ->Account Recovery.
• Enable forced challenge questions and configure Minimum Number of Forced Challenge Questions to be Answered .

Please follow the instructions in https://is.docs.wso2.com/en/latest/learn/managing-challenge-questions/#making-challenge-questions-mandatory . This will avoid missing security question answering.