Disable password reset functionality

793
2
08-04-2021 09:02 PM
Labels (1)
AngusHooper1
Occasional Contributor II

ArcGIS Enterprise Portal allows you to set showForgotUsername: false in the config.js and it also allows you to disable the ability for users to create built-in accounts via the portal organisation settings page. What is missing is the ability to disable the "forgot password" interface. Using this interface allows someone to confirm/deny the existence of accounts within the identity store even if that identity is within the built-in store or a 3rd party identity store (e.g. ldap).

Is there a mechanism for disabling the ability to reset a password for an account in Portal?

2 Replies
STINGERSIG_EDF-DPI
New Contributor

this deserves an answer, when using LDAP only, forgotten password requests get sent to ESRI, that's nonsense

YatharthSah
New Contributor II

Yes possible.
<Installation Directory>\webapps\arcgis#home

 

Rename the troubleshoot.html file to troubleshoot_old.html file.

It will disable Forgot password functionality