One Identity Password Manager 5.12.

User Guide
Copyright 2023 One Identity LLC.
ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this
guide is furnished under a software license or nondisclosure agreement. This software may be used
or copied only in accordance with the terms of the applicable agreement. No part of this guide may
be reproduced or transmitted in any form or by any means, electronic or mechanical, including
photocopying and recording for any purpose other than the purchaser’s personal use without the
written permission of One Identity LLC .
The information in this document is provided in connection with One Identity products. No license,
express or implied, by estoppel or otherwise, to any intellectual property right is granted by this
document or in connection with the sale of One Identity LLC products. EXCEPT AS SET FORTH IN THE
TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT,
ONE IDENTITY ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR
STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-
INFRINGEMENT. IN NO EVENT SHALL ONE IDENTITY BE LIABLE FOR ANY DIRECT, INDIRECT,
CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT
LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF
INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF
ONE IDENTITY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. One Identity makes
no representations or warranties with respect to the accuracy or completeness of the contents of this
document and reserves the right to make changes to specifications and product descriptions at any
time without notice. One Identity does not make any commitment to update the information
contained in this document.
If you have any questions regarding your potential use of this material, contact:
One Identity LLC.
Attn: LEGAL Dept
4 Polaris Way
Aliso Viejo, CA 92656
Refer to our Web site (http://www.OneIdentity.com) for regional and international office
information.
Patents
One Identity is proud of our advanced technology. Patents and pending patents may apply to this
product. For the most current information about applicable patents for this product, please visit our
website at http://www.OneIdentity.com/legal/patents.aspx.
Trademarks
One Identity and the One Identity logo are trademarks and registered trademarks of One Identity
LLC. in the U.S.A. and other countries. For a complete list of One Identity trademarks, please visit
our website at www.OneIdentity.com/legal. All other trademarks are the property of their
respective owners.
Legend

WARNING: A WARNING icon indicates a potential for property damage, personal

injury, or death.

CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data

if instructions are not followed.

IMPORTANT, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting

information.

Password Manager User Guide

Updated - November 2023
Version - 5.12.3
Contents

Self-Service Site 1
Getting Started 1
Connecting to Self-Service Site 1
Connecting to Self-Service Site with a Web Browser 2
Connecting to Self-Service Site from the Logon Screen 3
Register 3
Manage My Profile 4
Creating and Updating User Profile 5
Using a Passcode to Create or Update Your Questionsand Answers Profile 5
Changing security questions language 5
Resetting Your Password 6
Changing Your Password 7
Unlocking Your Account 7
Configuring Your Notifications 7
Changing User Interface Language 8

Helpdesk Site 9
Connecting to Helpdesk Site 9
Changing Managed User 10
Verifying User Identity 10
Assigning Temporary Passcodes 11
Resetting User Passwords 12
Unlocking User Account 12
Unlocking User Questions and Answers Profile 13
Enforcing Update of User's Questions and Answers Profile 13

About us 15
Contacting us 15
Technical support resources 15

Password Manager 5.12.3 User Guide 3

 1

Self-Service Site

l Getting Started
l Connecting to Self-Service Site
l Register
l Manage My Profile
l Creating and Updating User Profile
l Resetting User Passwords
l Changing Your Password
l Unlocking Your Account
l Configuring Your Notifications
l Changing User Interface Language

Getting Started
To start using Password Manager, you must register with Password Manager by creating
your personal Questions and Answers profile. For step-by-step procedure on how to
create your private Questions and Answers (Q&A) profile, see Creating and Updating User
Profile on page 5.
The topics covered in this section will provide you the information you need to create your
personal Q&A profile and perform password management tasks by using the Password
Manager Self-Service site.

Connecting to Self-Service Site

You can connect to the Self-Service site either by using a Web browser or from the
Windows logon screen, if the administrator has configured Password Manager to allow you

Password Manager 5.12.3 User Guide

1
Self-Service Site
to open the Self-Service site from the Windows logon screen.

Connecting to Self-Service Site with a Web

Browser
You can open the Self-Service site by clicking the desktop or Start menu shortcut to the
site. If there are no such shortcuts on your computer, you can open the site by entering the
Self-Service site URL in your Web browser. You can obtain the URL path to the Self-Service
site from your system administrator.

To connect to the Self-Service site using a Web browser

1. Connect to the Self-Service site by typing the Self-Service site URL in the address bar
of your Web browser. By default, the URL is http://<ComputerName>/PMUser/ (or
http://<ComputerName>/PMUserADLDS/ for Password Manager for AD LDS
version), where <ComputerName> is the name of the computer on which Password
Manager is installed.
You can obtain the computer name from your system administrator.
2. On the Self-Service site type in your user name or a part of your user name or your
email in the displayed text box.

NOTE: When specifying your user account, you can use any of the following
formats:
l <user_name>,
l <domain>\<user_name>, or
l <user_name>@<domain>,
l or any other value you use to log in.

3. Select your location from the Location list box.

4. This setting is optional and appears only if the administrator has configured it.
5. If more than one account is found, identify and select your account under
Search Results.
6. By default, on the Home page, you can perform the following tasks:

Table 1:
Home page

Task Reference

Register with Password Manager or Creating and Updating User Profile on

update your personal Questions and page 5
Answers profile

Reset your forgotten passwords Resetting Your Password on page 6

Password Manager 5.12.3 User Guide

2
Self-Service Site
Task Reference

Change your passwords Changing Your Password on page 7

Unlock your account Unlocking User Account on page 12

Set up email notifications Configuring Your Notifications on page 7

If you cannot find your account in the search results, follow the instructions on the screen.
If you enter a part of your account name, several matches may be found. In this case
you will see a list of user names followed by descriptions. Select your account name
from this list.

NOTE: You can change the user interface language. For more information see
Changing User Interface Language on page 8.

Connecting to Self-Service Site from the

Logon Screen
If your account is locked, and if you forgot your user name or your password, you can
access the Self-Service site from the Windows logon screen, provided that the
administrator has configured Password Manager to allow you to open the Self-Service site
from the Windows logon screen.

To connect to the Self-Service site from the Windows logon screen on a

computer running Windows 7 operating system

1. Press Ctrl+Alt+Delete.
2. Select your user tile and click the Forgot My Password command link on the
Windows logon screen.

To connect to the Self-Service site from the Windows logon screen on a

computer running Windows 8 or later operating system

1. Press Ctrl+Alt+Delete.
2. Select your user tile on the Windows logon screen.
3. Click Sign-in options and select the Password Manager icon.

Register
Use this workflow to select which registration methods to use for registration.
Register workflow allows the users to configure, which registration methods to use for
registration. However, the registration methods depend on what the administrator has

Password Manager 5.12.3 User Guide

3
Self-Service Site
enabled for Self-Service site. Following are the three methods, available for the users to
register in the User site.
l Corporate authentication
l Security questions
l Personal contact method: Email and Mobile

NOTE: Either one or multiple methods can be available for registration.

The users must register, using the method that is set as mandatory for registration by the
administrator. After registering with the mandatory method, users can choose to update
using the other available methods.

Manage My Profile
Use this activity to update questions and answers, corporate mobile number and email
address, or personal contact details on the Self-Service site. The registration methods
depend on what the administrator has enabled for Self-Service site. For the first time users,
the “Register” workflow shall be enabled and the “Manage My Profile” workflow shall be
disabled until they register. The users can select one of the following methods.
l Corporate authentication
l Security questions
l Personal contact method: Email and Mobile

Corporate authentication:Update the corporate authentication method, only if the

administrator has enabled the option to update if the mobile number and email address is
not available on the Active Directory.
Security questions: Update the set of question and answers.
Email: Update the email id in the textbox and, click Next to update the email address.
Mobile: Update the mobile number in the textbox and, click Next to update the
mobile number.
Upgrade scenario: Manage My Profile workflow will be available only for registered
users who have already registered using the available registration method on the Self-
Service site. The user can identify the methods available for update, by (green) or
(red) color icons. After the user sets a value for any of the available authentication methods
either through Register or Manage My Profile workflow, a (green) color icon is
displayed against the specific registration method. If the (red) color icon is displayed
against any registration method, it indicates that the user has not used that registration
method or set any value in Active Directory.

Password Manager 5.12.3 User Guide

4
Self-Service Site
Creating and Updating User Profile
To register with Password Manager, you need to create a user profile. A user profile is a
series of security questions (Q&A), corporate mobile number and email address, and
personal contact details to which you specify the appropriate information. Later, this
information is used to authenticate users when using the Self-Service site to reset your
forgotten passwords or unlock your account. When you create or update your user profile,
ensure that nobody knows the correct answers to the Q&A profile questions. However, the
registration methods depend on what the administrator has enabled for Self-Service site.

To create or update your user profile

1. Connect to the Self-Service site by using the procedure outlined in Connecting to

Self-Service Site on page 1.
2. On the Home page, click the Register or Manage My Profile link.
3. Follow the steps in the wizard to complete the task.

Using a Passcode to Create or Update Your

Questions
and Answers Profile
If you have forgotten your password and, at the same time, are not registered with
Password Manager or have forgotten your answers to security questions, you must obtain a
temporary passcode from the help desk before you can create or update your Questions
and Answers profile and reset your forgotten password.

To create or update your Q&A profile by using passcode

1. Connect to the Self-Service site by using the procedure outlined in Connecting to

Self-Service Site on page 1
2. On the Home page, click I Have a Passcode.
NOTE: HelpDesk can request you to check for an SMS or email message which
contains the passcode.
3. Follow the steps in the wizard to complete the task.

Changing security questions language

During registration, an unregistered user can view the Change language link using which
the user can view and select one of the languages configured by the Administrator. When
the user chooses a different language, the security questions appear in the same language
and the user can register the Q&A Profile in the chosen language.

Password Manager 5.12.3 User Guide

5
Self-Service Site
For example, if an administrator has chosen the Default language as English (United
Kingdom), an unregistered user while trying to register will view the security questions in
English (United Kingdom) as it is the configured default language and the user can
change the language by clicking the Change language link and choose the preferred
language for registration.
Both the registered and the unregistered users can view the Change language option in
the following Manage My profile workflow, and in a custom action Edit Q&A profile.

NOTE: Change language link is available in the Register page only for the
unregistered users.

Resetting Your Password

You can reset your forgotten password by using the Self-Service site, provided that you
have the appropriate permissions to do so. Password Manager allows you to reset your
password before you log on to the network (from the Windows logon screen), and when
you are already logged on to the system.
Depending on the settings configured by your administrator, you can reset password in one
or several systems, and provide either the same password or different passwords for
selected systems.

To reset your password

1. Connect to the Self-Service site by using the procedures outlined in Connecting to

Self-Service Site.
2. On the Home page, click Forgot My Password.
3. Select one of the following methods to reset your password:
l Corporate authentication: Authenticate the users using corporate
authentication method, only if the administrator enabled the option to
authenticate.
l Security questions: Select Security questions to authenticate and reset
the password, by answering the questions configured during registration.
l Personal contact method: Select Email and, click Get Passcode to receive
passcode on your registered email address. Type the passcode in Passcode
text box and click Next to authenticate and reset the password.
NOTE: Only selected methods display and are available for use to reset the password,
which the administrator selects in Authentication Methods.
NOTE: HelpDesk may request you to check for an SMS or email message which
contains the passcode.
4. Click Next.
5. Type and confirm your new password. Click Next. Your password was
successfully reset.

Password Manager 5.12.3 User Guide

6
Self-Service Site
Changing Your Password
You can change your password provided that you have the appropriate permissions
to do so.
Depending on the settings configured by your administrator, you can change your
password in one or several systems, and provide either the same password or different
passwords for selected systems.

To change your password

1. Connect to the Self-Service site by using the procedures outlined in Connecting to

Self-Service Site on page 1.
2. On the Home page, click Manage My Passwords.
3. Follow the steps in the wizard to complete the task.

Unlocking Your Account

You can unlock your account when it is locked, such as when you exceed the allowed
number of attempts to enter the correct password.

NOTE: You can unlock your account only if the administrator has configured Password
Manager to allow you to do it.

To unlock your account

1. On the Windows logon screen, click the Forgot My Password button or command
link to open the Self-Service Site.
2. On the Enter Your User Name page, type in your user name.
If you have entered only part of your user name, then you will be redirected to the
Find Your Account page where you can select your account or search for it.
3. On the Home page, click Unlock My Account.
4. Follow the steps in the wizard to complete the task.

Configuring Your Notifications

You can configure the Self-Service site to automatically send you email notifications when
specified events occur.

NOTE: You can change your notifications settings only if the administrator has
configured Password Manager to allow you to do it.

Password Manager 5.12.3 User Guide

7
Self-Service Site
To subscribe to event notifications

1. Open the Self-Service site by using the procedure outlined in Connecting to Self-
Service Site on page 1.
2. On the Home page, click My Notifications.
3. Follow the steps in the wizard to complete the task.

Changing User Interface Language

The user interface resources of Password Manager are fully localized. You can easily change
the user interface language.

NOTE: This feature is available only in multilingual versions of Password Manager.

To change the user interface language

1. On the navigation bar, click the language link.

2. In the Select Language dialog box, select your preferred language.

Password Manager 5.12.3 User Guide

8
Self-Service Site
 2

Helpdesk Site

l Connecting to Helpdesk Site

l Changing Managed User
l Verifying User Identity
l Assigning Temporary Passcodes
l Resetting User Passwords
l Unlocking User Account
l Unlocking User Questions and Answers Profile
l Enforcing Update of User's Questions and Answers Profile

Connecting to Helpdesk Site

To connect to the Helpdesk site
l Connect to the Helpdesk site by typing the Helpdesk site URL in the address bar of
your Web browser. By default, the URL is http://<ComputerName>/PMHelpdesk/ (or
http://<ComputerName>/PMHelpdeskADLDS/ for Password Manager for AD LDS
version), where <ComputerName> is the name of the computer on which Password
Manager is installed. You can obtain the URL path to the Helpdesk site from your
system administrator.
l On the logon page, enter your user name and password and click Log on.

NOTE: If Use Secure Token Server for authentication in 2FA enforcement is on for
the helpdesk site and a second factor authentication is set for the selected Secure Token
Server provider, the helpdesk user will be prompted for a second level of authentication
using the configured method.

Password Manager 5.12.3 User Guide

9
Helpdesk Site
To manage a user

1. Connect to the Helpdesk site by using the procedure outlined above.

2. On the Find User Account page, type either part of user's first and/or last
name, or both.
3. Under Search Results, click the user account matching the search criteria.
4. On the Home page, by default, you can perform the following tasks:
NOTE: You can change the user interface language. For more information, see
Changing User Interface Language on page 8.

Table 2:

Task Reference

Verify identity of the user Verifying User Identity on page 10

Assign a temporary passcode Assigning Temporary Passcodes on page 11

to the user

Reset user's password Resetting User Passwords on page 12

Unlock user's account Unlocking User Account on page 12

Unlock user's Q&A profile Unlocking User Questions and Answers Profile on
page 13

Require the user to update his Enforcing Update of User's Questions and Answers
Q&A profile Profile on page 13

Changing Managed User

To change the managed user

1. Click the user name displayed next to the task name being performed.
2. Click the Change user link.
3. On the Find User Account page, type either part of user's first and/or last
name, or both.
4. Under Search Results, click the user account matching the search criteria.

Verifying User Identity

Before performing any password management task, you must verify identity of the user.

Password Manager 5.12.3 User Guide

10
Helpdesk Site
To verify identity of a user

1. Open the Home page by using the procedure outlined in Connecting to Helpdesk
Site on page 9.
2. On the Home page, click Verify User Identity.
3. On the Verify User Identity page, select one of the following methods to
authenticate.
l Corporate authentication:Authenticate the users using corporate
authentication method, only if the administrator has enabled the option to
authenticate.
l Security questions: Select Security questions to authenticate and reset
the password, by answering the questions configured during registration.
l Personal contact method: Select Email and, click Get Passcode to receive
passcode on your registered email address. Type the passcode in Passcode
text box and click Next to authenticate and reset the password.

NOTE: Only selected methods display and are available for use to verify user
account, which the administrator selects in Authentication Methods.

4. Click Next to review the results on the status page.

Assigning Temporary Passcodes

If a user has forgotten the password and, at the same time, has not yet registered with
Password Manager, or has forgotten his answers to security questions, the user cannot
create or update a personal Q&A profile, or otherwise use Password Manager. To register
with Password Manager, and access its self-service functionality, the user must obtain a
personal temporary passcode which must be used within the specified period to complete
the registration procedure.
You can assign temporary passcodes to users provided that you have the appropriate
permissions.

To assign a temporary passcode to a user

1. Open the Home page by using the procedure outlined in Connecting to

Helpdesk Site.
2. On the Home page, click Assign Passcode.
3. On the Assign Passcode page, read the temporary passcode to the user. Let the
user know the passcode's expiration period.
NOTE: On the Password Manager administration site, if the Generate Passcode
and send it in Email or Generate Passcode and send it in SMS option is
enabled by the administrator, the passcode is sent using the selected method. The
HelpDesk user must inform the user, that the passcode will be sent via SMS or email.

Password Manager 5.12.3 User Guide

11
Helpdesk Site
 4. Click Next to review the results on the status page.
NOTE: Passcode expiration time is a period within which a newly generated passcode
is valid. Users must update or create their Q&A profiles by using this passcode within
the specified period.

Resetting User Passwords

If a user has forgotten their password, you can reset the password for this user, provided
that you have the appropriate permissions.

To reset user's password

1. Connect to the Helpdesk site by using the procedure outlined in Connecting to

Helpdesk Site on page 9.
2. On the Home page, click Reset Password.
3. Type user's answer(s) and click Next. The Reset Password page appears.
4. On the Reset Password page, select one of the following options to reset
the password.
a. Use the following auto generated password: An auto generated
password suggestion displays in text box. The user can use this password and
store it in a secure location for later use.
b. Enter the password manually: The user can select this option to set a
password manually. After selecting this option, type the password in the text
box and, confirm the password. Click Next.
NOTE: On the Password Manager administration site, if the Generate Passcode
and send it in Email or the Generate Passcode and send it in SMS option is
enabled by the administrator, then the password is sent using the selected method.
In this case, the HelpDesk user does not need to use the above options to reset the
password. However the HelpDesk user must inform the user, that the password will
be sent via SMS or Email.
5. After successful password reset, Password was successfully reset message
appears.

Unlocking User Account

If user’s account is locked out, you can unlock the account, provided that you have the
appropriate permissions.

Password Manager 5.12.3 User Guide

12
Helpdesk Site
To unlock user’s account

1. Open the Home page by using the procedure outlined in Connecting to

Helpdesk Site.
2. On the Home page, click Unlock Account.
3. On the Unlock Account page, select one of the following methods to authenticate.
l Corporate authentication:Authenticate the users using corporate
authentication method, only if the administrator has enabled the option to
authenticate.
l Security questions: Select Security questions to authenticate and reset
the password, by answering the questions configured during registration.
l Personal contact method: Select Email and, click Get Passcode to receive
passcode on your registered email address. Type the passcode in Passcode
text box and click Next to authenticate and reset the password.

NOTE: Only selected methods display and are available for use to unlock the
account, which the administrator selects in Authentication Methods.

Unlocking User Questions and Answers

Profile
If user’s Questions and Answers profile is locked, you can unlock the profile, provided that
you have the appropriate permissions.

To unlock user’s Questions and Answers profile

1. Open the Home page by using the procedure outlined in Connecting to Helpdesk
Site on page 9.
2. On the Home page, click Unlock Q&A Profile.
3. Follow the steps in the wizard to complete the task.

Enforcing Update of User's Questions

and Answers Profile
If user’s Questions and Answers profile does not comply with the current Q&A profile policy,
you can require the user to update the Q&A profile, provided that you have the appropriate
permissions.

Password Manager 5.12.3 User Guide

13
Helpdesk Site
To enforce update of user's Question and Answers profile

1. Open the Home page by using the procedure outlined in Connecting to Helpdesk
Site on page 9.
2. On the Home page, click Enforce Update of Q&A Profile.
3. Follow the steps in the wizard to complete the task.

Password Manager 5.12.3 User Guide

14
Helpdesk Site
 About us

About us

One Identity solutions eliminate the complexities and time-consuming processes often
required to govern identities, manage privileged accounts and control access. Our solutions
enhance business agility while addressing your IAM challenges with on-premises, cloud and
hybrid environments.

Contacting us
For sales or other inquiries, visit https://www.oneidentity.com/company/contact-us.aspx.

Technical support resources

Technical support is available to One Identity customers with a valid maintenance contract
and customers who have trial versions. You can access the Support Portal at
https://support.oneidentity.com/.
The Support Portal provides self-help tools you can use to solve problems quickly and
independently, 24 hours a day, 365 days a year. The Support Portal enables you to:
l Submit and manage a Service Request
l View Knowledge Base articles
l Sign up for product notifications
l Download software and technical documentation
l View how-to-videos at www.YouTube.com/OneIdentity
l Engage in community discussions
l Chat with support engineers online
l View services to assist you with your product

Password Manager 5.12.3 User Guide

15
About us