Problem: During a Password reset or Account unlock, users are still being prompted to answer authentication Questions even though the module has been removed from the authentication flow ?
Solution: The Reset Questions module needs to be removed from ALL authentication flows including Desktop and Mobile.
By default the 'Reset Question' authentication module is assigned to all Password Reset and Account Unlock processes for Browser, Mobile and Desktop front ends. If you have configured the system to use a different authentication module like PIN or OTP and are not using Reset Questions, you need to ensure that it has been removed from ALL authentication flows and Front Ends, even if you are not using the Mobile and Desktop front ends.
From the Authentication page, select the Front End dropdown menu.
Selecting this will display the options for both Mobile and Desktop, select one of these and the Authentication page will update to display the options available for that interface.
From here you can replace the Questions module with the module you are using.
- Complete this for both the Mobile and Desktop front ends.