topic Re: Disable password reset functionality in ArcGIS Enterprise Portal Questions

Disable password reset functionality

AngusHooper1 — Thu, 05 Aug 2021 04:02:42 GMT

ArcGIS Enterprise Portal allows you to set showForgotUsername: false in the config.js and it also allows you to disable the ability for users to create built-in accounts via the portal organisation settings page. What is missing is the ability to disable the "forgot password" interface. Using this interface allows someone to confirm/deny the existence of accounts within the identity store even if that identity is within the built-in store or a 3rd party identity store (e.g. ldap).

Is there a mechanism for disabling the ability to reset a password for an account in Portal?

Re: Disable password reset functionality

STINGERSIG_EDF-DPI — Wed, 06 Jul 2022 14:45:05 GMT

this deserves an answer, when using LDAP only, forgotten password requests get sent to ESRI, that's nonsense

Re: Disable password reset functionality

YatharthSah — Wed, 12 Apr 2023 04:10:51 GMT

Yes possible.
<Installation Directory>\webapps\arcgis#home

Rename the troubleshoot.html file to troubleshoot_old.html file.

It will disable Forgot password functionality

Re: Disable password reset functionality

RandallWilliams — Fri, 26 Jan 2024 19:59:32 GMT

This work around is a hack and does nothing to change the back end API. It just obfuscates the troubleshoot.html page. Please log an enhancement with support to block this capability if you're using IWA OR if you're only allowing organization-specific logins.