Resolving 'Verification Information Should Not Contain Part of the Question' Error in Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

 This article addresses the error message "The verification information should not contain part of the question" encountered when configuring Forgotten Password questions and answers in the Identity Manager user interface.

Environment

Identity Manager

Resolution

The error message is triggered by a hardcoded validation check within the Identity Manager ForgottenPasswordHandler logic. This check prevents the answer to a security question from containing any portion of the question text itself.

• Validation Constraint:

  • This validation is hardcoded within the ims.jar file (ForgottenPasswordHandler.class).
  • The check is not configurable and cannot be disabled.
  • This constraint applies regardless of how the data is loaded (e.g., via User Console or bulk loading tools).

• Error Location:

  • The error message is defined within the IMSExceptions.properties file located at: JBoss/Wildfly/standalone/deployments/iam_im.ear/custom/resourceBundles/IMSExceptions.properties
  • The specific entry is: 3081=The verification information should not contain part of the question.

• Workaround:

  • Ensure that security question answers do not contain any words found in the corresponding question text.
  • For data imports, validate the content of the answer fields prior to ingestion to avoid load failures.