SSPR presents same list of challenge questions after a question is answered incorrectly

  • 7018707
  • 14-Mar-2017
  • 14-Mar-2017


Self Service Password Reset
SSPR 3.x
SSPR 4.0
SSPR 4.1


List of SSPR random C/R questions is not regenerated after a wrong answer.
Users who answer one or more challenge questions incorrectly are presented with the same list of questions.
SSPR users who have populated multiple challenge responses are presented with a subset of those questions when accessing the SSPR forgotten password module.  If one question is answered incorrectly, the same list is presented.


This is working as designed.  An enhancement request has been entered requesting the list to be regenerated on failure.


Reported to Engineering