Make password recovery a controlled identity workflow
Core Password is an automated password-management enquiry in the Core Security identity portfolio. Its value depends on the supported target systems and the way a requester proves they are entitled to change access. Self-service should reduce friction without creating an easier route for an impostor to reset another person's credential.
Map the identity sources, applications and existing help-desk process. Identify users who cannot complete the default recovery path and the authorised alternative. A password change on one system may not update every connected application, so define which outcomes the project actually promises.
Test reset, synchronisation and exception handling
Confirm current Core Password and related component entitlements, supported connectors and recovery options. Use approved test identities to verify enrolment, identity checks and the target change. Include a failed connection, an ineligible request and a user who needs the help desk.
Agree what evidence is recorded without exposing secret values. The support team should know how to distinguish a reset failure from an application or directory fault. Handover should document user guidance, permissions, target coverage and escalation. Where the selected configuration includes synchronisation, test its effect on representative consumers and record limitations. Continuing connector maintenance and policy changes need ownership separate from the initial software supply.
Evidence to request for this scope
- Confirm current product packaging and supported password-management targets.
- Validate approved identity verification, successful reset and the denied-request path.
- Test partial failure and document secure escalation for users unable to use self-service.