Novell Doc: Identity Manager User Application: Administration Guide

19.2 About the password portlets

To implement password self-service and user authentication features in your Identity Manager user application, you’ll use the following portlets:

Portlet	Description
Section 19.3, IDM Login Portlet	The IDM Login provides robust user authentication supported by Identity Manager (through Universal Password, password policies, and NMAS). The IDM Login portlet redirects to the other password portlets as needed during the login process.
Section 19.4, IDM Challenge Response portlet	This self-service portlet lets users: Set up the valid responses to administrator-defined challenge questions, and set up user-defined challenge questions and responses Change the valid responses to administrator-defined challenge questions, and change user-defined challenge questions and responses
Section 19.5, IDM Hint Definition portlet	This self-service portlet lets the user set up or change their password hint (which may be displayed or emailed as a clue in forgotten password situations).
Section 19.6, IDM Change password portlet	This self-service portlet lets the user change (reset) their Universal Password, according to the assigned password policy. It uses that policy to display the rules that the new password must conform to. If Universal Password is not enabled, this portlet changes the user’s eDirectory (simple) password, as permitted in the user's Password Restrictions.
Section 19.7, IDM Forgot Password portlet	This self-service portlet uses challenge/response authentication to let the user get information about their password (from NMAS). The result, which depends on the assigned password policy, may include: Displaying the user’s password hint on the screen Emailing the hint to the user Emailing the password to the user Prompting the user to reset (change) the password

19.2.1 Password self-service portlet modes

The password self-service portlets (IDM Challenge Response, IDM Hint Definition, and IDM Change Password) operate in two modes:

Mode	Description	Runtime behavior
Standalone mode	Portlets run standalone on shared pages.	If portlet runs successfully, it displays a success message with a link to perform the operation again. If portlet is unsuccessful, it displays an error message in the existing form.
Delegation mode	Portlets are displayed on a page as a result of a validation check during login.	If portlet runs successfully, user is redirected to a new portlet or to the user application main page. No success message is displayed. If portlet is unsuccessful, it displays an error message in the existing form.