Skip to main content

PasswordResetSettings

Settings used to manage the Password Reset functionality.

Properties

NameTypeDescriptionNotes
allow_ignore_ip_address_for_rbaboolFlag indicates if ignore ip address for rba will be allowed or not.[optional]
authenticatorsList[str]The list of second factor authenticator types that can be used during a password reset operation.[optional]
challenge_sizeintFor a KBA authenticator, it is the number of questions that the user must answer--not supported if these settings are part of a Group Policy (not the Global Policy).[optional]
email_accountboolIndicates whether an email should be sent to notify the user account has been locked, unlocked, or an attempt of unlock has occurred.[optional]
email_otp_enabledboolIndicates if OTP can be sent to email.[optional]
enabledboolIndicates whether password reset is enabled.[optional]
groupsList[Group]Groups that can perform a password reset operation--not supported if these settings are part of a Group Policy (not the Global Policy).[optional]
two_second_factor_requiredboolIndicates whether two forms of second factor authentication must be completed before a password reset operation can be done.[optional]
unlock_accountboolIndicates whether the user account should be unlocked after a password reset operation is completed.[optional]
versionintIndicates the version of this model.[optional]
wrong_answers_allowedintFor a KBA authenticator, it is the number of questions that the user could answer incorrectly and still be considered a valid response--not supported if these settings are part of a Group Policy (not the Global Policy).[optional]

Example