Question
Accenture
IN
Last activity: 19 Dec 2017 2:35 EST
Customize Forgot Password
In Pega 7.3 forgot password functionality sends OTP to the email in the operator id. We need to send OTP to the mobile number in the operator id.
When tried to trace OOTB implementation for 2 factor authentication I was able to identify only the correspondence rule-pyForgotPasswordOTPCorr but not sure how OTP is generated and sent in this correspondence rule.
Can some one help us understand the rules involved once user clicks Email Password in Forgot password ? screen so that we can customize to include sending OTP via SMS.
Any suggestions are appreciated.
J.P. Morgan Services India PVT Ltd
IN
HI
Please follow the below post:
The Two factor authentication(feature) uses OneTimePassword(OTP) which was introduced in Pega 7.3 .
You can use this API (pxSendOTP) to store and generate one-time passwords.
some useful links:
https://community.pega.com/knowledgebase/release-note/two-factor-authentication-one-time-passwords
https://docs-previous.pega.com/configuring-login-security-and-password-policies
Updated: 23 Nov 2017 11:25 EST
Accenture
IN
Thanks for the response.
However pxSendOTP and pxVerifyOTP are final activities which we wont be able to customize.
Can we understand how OOTB functionality of sending OTP via email is implemented as we dont see any rules in the tracer while tracing the guest requestor for Forgot Password functionality?
Attaching the tracer snapshot for reference. We see only correspondence details (CorrSend activity) but not sure from which rule this activity is triggered?
Our Requirement:
We need to send OTP to mobile instead of email as part of Forgot Password.
Any suggestions are appreciated.
Pegasystems Inc.
IN
Hi,
This is a platform feature and cant be customized. However in the upcoming release we are giving option for sending OTP via SMS.