Usage

The IdmSecurityQuestionManagementState can be used to define security questions. The prerequisites are that the user is already authenticated and the user is stored in the session. A security question credential is not needed since the AuthState is able the create it for the user. If the credential is locked, the user will not be able to define security questions and the transition "locked" is set.

The GUI will generate a view where the user can select a question and provide an answer to it. This will be repeated until the user has defined the minimal number of questions required by the policy. The user has to select the questions to be answered one by one.