Part 4: How to set up Password Reset for SQL Membership users in Forms-based Authentication by using security questions.

Are you looking for a simple and easy way to provide users with a self-service password reset capability through email or a security question-based challenge/response mechanism on SharePoint 2013? Look no further, for Bamboo Password Reset Web Part is available NOW for SharePoint 2013! To celebrate the launch of Password Reset Web Part, we’re introducing a new four-part blog series that will walk you through the Web Part and all of its functionalities.

As part four of four, this article will show you how to configure the Password Reset Web Part so that passwords can be reset by SQL Membership users in Forms-based Authentication by using security questions.

To begin, navigate to the Edit Page menu and click on the Insert tab. Choose Bamboo Solutions from Categories and Password Reset Web Part from Parts:

To begin configuring the Web Part, go to Modify in the tool pane.

In Select a Zone, choose Intranet.

In the Claims Authentication Mode Forms section, select the Forms Based Authentication radio button.

Regarding the Just show confirmation message checkbox on the Zone Configuration screen, please note:

• If you check this box, the Web Part will only display a confirmation message after your password has been reset successfully. An additional textbox will NOT be displayed.
• If you do not check this box, the Web Part will display both a confirmation message as well as text boxes after your password has been reset successfully.

Check the Provider requires security question and answer checkbox:

Check Apply and OK in the tool pane. Password Reset Web Part will look as pictured below with the following “error” message:

To resolve this error, go to the IIS Manager Program, right-click the current site, and select the Explore menu:

Open web.config file:

Press Ctrl + F. In the Find What section, input the question as the word to find. You will see requiresQuestionandAnswer = “false”:

Change requireQuestionandAnswer = “false” to requiresQuestionandAnswer = “true”:

Refresh your site. Input the information for the user whose password you want to reset:

Click Submit and input the Answer to the Security Question:

If you’re wondering where the Security Question and Security Answer came from, they were created when User Account Setup Web Part was utilized to create the user:

Once the security question has been correctly answered, a new password will appear for the user:

Ready to give Password Reset Web Part a try? Jump over to the Password Reset Web Part product page

Check out the rest of the series here:

• Part One – How to setup Password Reset for Active Directory users in Windows Authentication by using security questions
• Part Two – How to setup Password Reset for Active Directory users in Windows Authentication by using an email address
• Part Three – How to setup Password Reset for SQL Membership users in Forms-Based Authentication by using an email address