· 2 min read
Password Reset and User Verification
We are excited to announce that we are working on some improvements to Atria's password reset and user verification processes. These improvements are currently undergoing final testing and we will be seeking customer fee.
Coming Soon
We are excited to announce that we are working on some improvements to Atria’s password reset and user verification processes. These improvements are currently undergoing final testing and we will be seeking customer feedback in the near future.
Self-service Password Reset
The current password reset process in Atria relies on “security questions.” However, these questions are considered to be unreliable because they can be easily guessed or found, prone to user error or forgotten answers, and potentially biased.
To address these issues and improve the password reset experience for users, Atria will allow users to set up a “recovery email address.” The new password reset process will work as follows:
1. User enters their UPN or username and verifies they are not a robot using a captcha.
2. Atria generates a unique reset token and sends a reset link to the recovery email address.
3. The user clicks on the link, enters the MFA code if MFA is enabled, and then resets their password after the MFA code has been verified. Note that the password complexity verifier has also been improved.
With MFA enabled, this new process offers a more secure and user-friendly way to reset passwords.
User Verification
Many helpdesks struggle to verify the identity of users calling for assistance. To solve this problem, Atria will be adding a verification feature to make it easier for helpdesk agents to verify a user’s identity without having to share sensitive information.
The verification process will use the same mechanism as the password reset process. Here’s how it will work:
- The helpdesk agent searches for the user in Atria.
- The agent clicks on the verification link.
- The agent can choose to verify the user using either the primary email address or recovery email address.
- An email will be sent to the verification address, and the user will click on the link.
- The helpdesk agent will see that verification has been completed and can continue to assist the user.
Atria keeps a record of all verification requests, including who made the request and when it was approved.
Transform Your Business
Discover Atria’s versatile solution to streamline tasks, supercharge your helpdesk, empower customers with self-service, and ensure data security with user validation and self-service password reset.
