Configure StoreFront to allow users to record answers to security questions
Configure StoreFront to allow users to enroll their answers to the security questions. When they are enrolled, they can reset domain passwords and unlock domain accounts. For more information, see the StoreFront documentation.
- Configure Storefront Internet Information Services (IIS) to HTTPS.
- Create a new deployment in Storefront.
In the right pane of the StoreFront management console, right-click the store and choose Manage Authentication Methods.
Choose Manage Password Options under settings of User name and password.
Choose when you want users to change passwords and click OK.
Choose Configure Account Self-Service under settings of User name and password.
Choose Citrix SSPR to enable Account Self-Service.
Click Configure, choose “Enable password reset” and “Allow account unlock”, and configure the “SSPR Account Service URL” (https ://< FQDN of the SSPR server>/MPMService).
- Click OK to apply all the settings.
Note: You must configure the site to use the unified experience.
The next time the user logs on to Citrix Workspace app or Citrix Workspace app for Web, security enrollment is available. After clicking Start, questions are displayed to which the user must specify answers.