In webnetwork 6.x there are options (see below) on the Password Reset Policy to force users to answer their questions but the example below can be used for both 5.x and 6.x
Using Login Script:
In the login script for the profile, you can add the following code. This code will check if they filled in an answer for Question #1 and Question #2. 5.4 only allowed two questions. 6.x allows more than two.
// *** Check for security questions answered ***
IF EMPTY ATTRIBUTE "swareAnswer1" OR EMPTY ATTRIBUTE "swareAnswer2" THEN
executeurl("/apps/selfService/resetPasswordOptions.jsp",newWindow) END
To utilize the features built into webNetwork 6.x:
- Launch webAdmin Dashboard.
- Expand Tree Root.
- Browse to and select the Password Reset Policy.
- Check the Force Update Enable check box.
- Set the Start Date to any date prior to today (default is 01/01/2009).
- Save the Password Reset Policy.
When users next authenticate, they will be prompted to select and answer the questions for Password Reset.
To force users in the future, you just need to increment that "Start Date" field (if you set it for a future data, that is when they will be next prompted, which is good if you want to make sure users remember their questions/answers).
Note: All users will need access to the Configure Password Rest link which is under the Account menu. If users do not have access to that then password self service and filling in their answers will not work.