Users are unable to specify their own questions even after the Administrator checks the 'Allow users (NETIQKB38016)

Users are unable to specify their own questions even after the Administrator checks the 'Allow users to edit their identity verification questions and answers' flag.

If the flag 'Allow users to edit their identity verification questions and answers' is checked users are only allowed to modify their answers to the questions or to change the questions by selecting another question from the drop-down list.

This behavior is by design. The  'Allow users to edit their identity verification questions and answers' flag exposes the 'Edit my SPA profile' link on the Secure Password Administrator (SPA) Self-Service site.  By checking this flag, the Admin allows all SPA users to be able to do the following:

• Modify the existing answers to the questions
• Allow the users to select another question from the drop-down list configured by the SPA Admin

Checking this option will not allow the users to type their own questions.   It only allows the users to select a different questions from the drop-down list already set by the Administrator.

The flag  'Allow users to edit their identity verification questions and answers', if checked under the 'Configure SPA Profile Settings' section, will not allow users to specify their own questions.  This is by design.

Formerly known as NETIQKB38016