SSPR presents same list of challenge questions after a question is answered incorrectly

  • 7018707
  • 14-Mar-2017
  • 14-Mar-2017

Environment

Self Service Password Reset
SSPR 3.x
SSPR 4.0
SSPR 4.1

Situation

List of SSPR random C/R questions is not regenerated after a wrong answer.
Users who answer one or more challenge questions incorrectly are presented with the same list of questions.
SSPR users who have populated multiple challenge responses are presented with a subset of those questions when accessing the SSPR forgotten password module.  If one question is answered incorrectly, the same list is presented.

Resolution

This is working as designed.  An enhancement request has been entered requesting the list to be regenerated on failure.

Status

Reported to Engineering