none
Allow help desk to read password challenge questions

    Question

  • I know this has been asked a couple of time but I just wanted to confirm that it is not possible at this time to grant help desk users the ability to read the password challenge answers for another user.

    Basically, we want to make these answers read only objects on a user profile so if someone calls in, the help desk can use this information to authenticate the caller based on their registration.  If anyone has any insight or suggestions on this scenario, please speak up!

    Cheers!

    Tuesday, August 06, 2013 7:06 PM

Answers

  • AFAIK that's not possible.

    This is not what you wanted, but you could extend the schema and make some "question attributes". Then you would grant the user to view and edit and the hepdesk to view those attributes.

    • Marked as answer by FIM_Admin Wednesday, August 07, 2013 3:11 PM
    Tuesday, August 06, 2013 7:23 PM
  • It's not possible AFAIK - pretty sure the answers are stored as a one-way hash and therefore can't be read.

    Andrew.

    • Marked as answer by FIM_Admin Wednesday, August 07, 2013 3:11 PM
    Wednesday, August 07, 2013 5:20 AM

All replies

  • AFAIK that's not possible.

    This is not what you wanted, but you could extend the schema and make some "question attributes". Then you would grant the user to view and edit and the hepdesk to view those attributes.

    • Marked as answer by FIM_Admin Wednesday, August 07, 2013 3:11 PM
    Tuesday, August 06, 2013 7:23 PM
  • It's not possible AFAIK - pretty sure the answers are stored as a one-way hash and therefore can't be read.

    Andrew.

    • Marked as answer by FIM_Admin Wednesday, August 07, 2013 3:11 PM
    Wednesday, August 07, 2013 5:20 AM
  • Thanks Gaston and Andrew for the insight.  I will let you know what we end up doing.
    Wednesday, August 07, 2013 3:11 PM