Configure StoreFront to allow users to record answers to security questions

Configure StoreFront to allow users to enroll their answers to the security questions. When they’re enrolled, they can reset domain passwords and unlock domain accounts. For more information, see the StoreFront documentation.

  1. Configure StoreFront Internet Information Services (IIS) to HTTPS.
  2. Create a deployment in StoreFront.
  3. In the right pane of the StoreFront management console, right-click the store and choose Manage Authentication Methods.

    Manage authentication methods

  4. Choose Manage Password Options under settings of User name and password.

    Note:

    Self-Service Password Reset (SSPR) supports only the User name and password authentication method of StoreFront. It doesn’t support other methods such as domain pass-through.

    Manage password options

  5. Choose when you want users to change passwords and click OK.

    Allow users to change passwords

  6. Choose Configure Account Self-Service under settings of User name and password.

    Configure account self-service

  7. Choose Citrix SSPR to enable Account Self-Service.

    Choose Citrix SSPR

  8. Click Configure, choose Enable password reset and Allow account unlock, and configure the SSPR Account Service URL (https://< FQDN of the SSPR server>/MPMService).

    SSPR account service URL

  9. Click OK to apply all the settings.

Note:

Configure the site to use a unified experience.

The next time the user logs on to Citrix Workspace app or Citrix Workspace app for Web, security enrollment is available. The user can click Start to specify answers to the security questions for future password resetting or account unlocking.

Manage security questions

Configure StoreFront to allow users to record answers to security questions

In this article