Resolving 'Not Enough Questions Configured' Error in Forgotten Password Reset - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

This article addresses the error message "the user doesn't have enough questions configured" encountered during the Forgotten Password self-service process.

Environment

Identity Manager 14.5 & 15

 

Cause

This error occurs when the security question configuration violates the constraint rule: (Number of Questions) + (Number of Acceptable Incorrect Answers) ≤ (Total Questions Configured for User)

If the sum of required questions and allowed incorrect answers exceeds the total number of questions available to the user, the self-service task fails to initialize, resulting in the error message.

Resolution

To resolve this issue, adjust the self-service policy configurations to satisfy the constraint rule.

1. Navigate to the security question configuration settings in the Identity Manager Admin console.
2. Review the following parameters:
   • Number of Questions: The amount the user must answer to reset their password.
   • Number of Acceptable Incorrect Answers: The threshold for failed attempts before the task locks.
   • Total Number of Questions: The total pool of questions available to the user.
3. Ensure that the Number of Questions plus the Number of Acceptable Incorrect Answers is less than or equal to the Total Number of Questions.
   • Example: If the user has 5 total questions available, and you require 3 for the reset, the allowed incorrect answers cannot exceed 2.
     
     
     

Note: If these values exceed the total questions (e.g., 3 required + 3 incorrect = 6, which is greater than 5), the system will trigger the error message.

Additional Information

For more information about these configurations, access the documentation Custom Forgotten Password Reset and Forgotten User ID Tasks - 14.5 or Custom Forgotten Password Reset and Forgotten User ID Tasks - v15

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.