Environment
Self Service Password Reset
SSPR 3.x
SSPR 4.0
SSPR 4.1
Situation
List of SSPR random C/R questions is not regenerated after a wrong answer.
Users who answer one or more challenge questions incorrectly are presented with the same list of questions.SSPR users who have populated multiple challenge responses are presented with a subset of those questions when accessing the SSPR forgotten password module. If one question is answered incorrectly, the same list is presented.
Resolution
This is working as designed. An enhancement request has been entered requesting the list to be regenerated on failure.