Report errors or omissions

Create and manage KBA questions for users

During registration or enrollment of a knowledge-based authenticator (KBA), the user selects several questions and provides easily-remembered answers. Later, when they are challenged with one or more knowledge-based questions, they can answer them to authenticate. You can allow the user to alter the answers at any time, provided they are logged in to Identity as a Service.

A question can only be included in a user's KBA if the language preference matches the language of the question created.

You can do the following:

Enable or disable System Questions and Custom Questions

Create and edit custom questions for users

Delete Custom Questions

Disable Questions

You cannot delete System Questions, but you can disable them. When disabled, the question is not available to users for KBA authentication.

Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears. By default, the System Defined Questions appear.

If required, click System Questions.

-or-

Click Custom Questions to access the list of Custom Questions.

Click to disable a question.

Click to re-enable a question.

Create Custom Questions

Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears.

Click Custom Questions.

Select the localized language from the drop-down list.

Click Add. The Add Question dialog box appears.

Enter the Question.

Click Save. The question appears in the Custom Questions list page.

Repeat steps 4 to 6 to add more questions.

Edit and Delete Custom Questions

Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears.

Click Custom Questions.

Do the following, as required:

To change a question, click the question you need to edit. The Edit Question dialog box appears.

Edit the question as required and then click Save.

To delete a question, click and then click Delete on the confirmation prompt.