Enable or Disable Self-Service Features

You can customize your Self-Service deployment by enabling or disabling Self-Service features. For example, suppose you do not want users to recover their lost or forgotten passwords by themselves. You can hide the Forgot your password link, which allows users to change their passwords.

The following features are disabled by default:

  • Allow email delivery of CT-KIP URL if user cannot scan QR Code

  • Display Forgot your password link

  • Display Troubleshoot SecurID token link

  • Display I forgot my PIN option

All settings are global and apply to your entire deployment.

Before you begin

RSA recommends that you carefully consider the security implications before enabling these features.

Procedure

  1. In the Security Console, click Setup > Self-Service Settings.

  2. On the Settings page, under Customization, click Enable or Disable Self-Service Features.

  3. Under Enable or Disable Self-Service Features, select the options for features that you want to enable in the Self-Service Console, and clear the options for features that you want to disable.

  4. Under Set Display Options for Self-Service Console - Home Page, select the display options that you want to show on the Home page of the Self-Service Console, and clear the options that you want to hide.

    Note: If you clear Display Log On Section, users cannot log on from the Home page or view their profile information on the My Account page of the Self-Service Console.

  5. Under Set Display Options for Self-Service Console - My Account Page, select the display options that you want to show on the My Account page of the Self-Service Console, and clear the options that you want to hide.

  6. Under Set Display Options for Troubleshooting, select the display options that you want to show on Self-Service Console, and clear the options that you want to hide.

  7. Click Save.

After you finish

If you enabled the I Have Forgotten My Smart Card PIN or it is Blocked Option under Set Display Options for Troubleshooting, you must import the PIN unlocking keys before users can use this option. For instructions, see Clear an SecurID PIN