Configure StoreFront to allow users to record answers to security questions

Configure StoreFront to allow users to enroll their answers to the security questions. When they are enrolled, they can reset domain passwords and unlock domain accounts. For more information, see the StoreFront documentation.

  1. Configure Storefront Internet Information Services (IIS) to HTTPS.
  2. Create a new deployment in Storefront.
  3. In the right pane of the StoreFront management console, right-click the store and choose Manage Authentication Methods.

    image of manage authentication methods

  4. Choose Manage Password Options under settings of User name and password.

    image of manage password options

  5. Choose when you want users to change passwords and click OK.

    image of allow users to change passwords

  6. Choose Configure Account Self-Service under settings of User name and password.

    image of configure account self-service

  7. Choose Citrix SSPR to enable Account Self-Service.

    image of choosing citrix SSPR

  8. Click Configure, choose “Enable password reset” and “Allow account unlock”, and configure the “SSPR Account Service URL” (https ://< FQDN of the SSPR server>/MPMService).

    image of SSPR account service URL

  9. Click OK to apply all the settings.

Note: You must configure the site to use the unified experience.

The next time the user logs on to Citrix Workspace app or Citrix Workspace app for Web, security enrollment is available. After clicking Start, questions are displayed to which the user must specify answers.

image of manage security questions

Configure StoreFront to allow users to record answers to security questions

In this article