Configuring an email notification to define user password

This blog will discuss how to configure an auto generate email to define the password when creating a user via management console. In WSO2 Identity Server there is an inbuilt feature called 'Ask Password' to fulfill this requirement. Lets look at how to implement this in other wso2 products.

'Ask Password' is a feature that comes with wso2 Identity Server. The purpose of this feature is to allow the users to decide there own password rather than defining a password by the server administration and allow the user to change the defined password.

So let me move on to the purpose of writing this blog.

While I was working with WSO2 API Manager, I got a requirement that the APIM administrator wants to create users via APIM management console, but the administrator wants to allow the users to define a password by the user itself. This requirement can be fulfilled using the 'Ask Password' feature available in wso2 Identity Server.

Scenario

APIM Administrator creates a user by providing a username and a user email through the management console. Then an email will be sent to the defined email address with a redirection URL to define a password for the user account.

I will use APIM 1.10.0 product to explain this.


Steps to configure 'Ask Password' feature in APIM 1.10.0


1. Download APIM server

2. Log in to APIM server as the administrator

When you go to 'Add User' option you can see a window like below.



Now lets look at how to configure auto-email to set user password.

3. Install 'Account Recovery and Credential Management' feature in APIM

Due to some of the limitations in identify server feature activation, you have to install 'Account Recovery and Credential Management' feature in APIM 1.10.0. ( Steps to install a feature in wso2 product can be found from [1]).

4. As the next step, do the configuration changes mentioned here in APIM server.

These configurations are required to enable 'Ask Password' feature.

5. Restart the server after above changes.

When you navigate to 'Add User' option you can see that 'Ask password' feature is installed in UI as below.



6. Now create a user from APIM management console by defining the user email address.

You can verify whether auto generate email is received to the defined user email address and the user can define a password through the redirection screen provided in the auto-generated mail. Then check whether the user can successfully log in to APIM server.



Now APIM administrator can add the users via management console and allow the users to define a password they prefer.





[1] https://docs.wso2.com/display/Carbon440/Installing+Features+via+the+UI

Comments

Post a Comment

Popular posts from this blog

Use ZAP tool to intercept HTTP Traffic

Image
ZAP Tool Zed Attack Proxy is one of the most popular security tool that used to find security vulnerabilities in applications. This blog discuss how we can use the ZAP tool to intercept and modify the HTTP and HTTPS traffic. Intercepting the traffic using the ZAP tool Before we start, lets download and install the ZAP Tool. 1) Start the ZAP tool using / zap.sh 2) Configure local proxy settings  To configure the Local Proxy settings in the ZAP tool go to Tools -> Options -> Local Proxy and provide the port to listen. 3) Configure the browser  Now open your preferred browser and set up the proxy to listen to above configured port. For example: If you are using FireFox browser browser proxy can be configured by navigating to "Edit -> Preferences -> Advanced -> Setting -> Manual Proxy Configuration" and providing the same port configured in the ZAP proxy 4) Recording the scenario Open the website that you want to intercept using t
Read more

Working with WSO2 carbon Admin Services

Image
WSO2 products managed internally using defined SOAP web services named as admin services. This blog will describe how to call the admin services and perform operation with out using the Management Console. Note - I will be using WSO2 Enterprise Integrator to demonstrate this. Lets look at how to access the admin services in wso2 products. By default the admin services are hidden from the user. To enable the admin services, 1. Go to <EI_HOME>/conf/carbon.xml and enable admin services as follows <HideAdminServiceWSDLs>false</HideAdminServiceWSDLs> 2. Now start the EI server using ./integrator.sh -DosgiConsole When the server is started click 'Enter' and you will be directed to the osgi console mode. 3. To search the available admin services, Add 'listAdminServices' in the osgi console.This will list down the available admin services with the URL to access the admin services. Access Admin Service via SOAP UI 4. You can ac
Read more

The 100% Open Source ESB

Image
Open Source ESB Market Today, open source solutions giving a significant competition to the proprietary software solutions. Same applies for the ESB software. There are number of open source ESB solutions available in the market, but the WSO2 ESB is the only ESB solution to be claimed as a 100% Open Source ESB solution in this competitive market. It was licensed under Apache License versions 2.0 . When we say 100% Open Source ESB, there can be several questions coming in to your mind. Below will answer your questions. Is the entire source code available freely? How about the Enterprise edition of WSO2 ESB? There is no such concept called Enterprise WSO2 ESB and Open Source WSO2 ESB as you have come across with other open source ESB solutions. In WSO2 ESB, we provide the entire source code available for the users without restricting the use of any available feature. Managing the success with Open Source Model When it comes to Open Source ESB, you may have some doubts
Read more