City of San Antonio Self-

Service Password

Management User Guide

Version 1.0 ● October 19, 2017

COSA Self-Service Password Management User Guide

Page 2

TABLE OF CONTENTS

1.0 Introduction…………………………………………………………………………3

2.0 Enrollment with COSA AD Self-Service ………………………………………..3 3.0 Enrollment Process………………………………………………………….........4

4.0 4.0 Mobile Application………………..……………………..…………………….6 5.0 Reset your forgotten password………………………………………………….13

COSA Self-Service Password Management User Guide

Page 3

1.0 Introduction

COSA has implemented ADManager Plus and ADSelf-Service Plus from ManageEngine to provide a

comprehensive COSA Self-Service Password Management solution. The solution allows ITSD to provide

password reset notifications and secure web based user password resets from both desktop and

registered mobile devices without having to call the ITSD helpdesk (210-207-8888).

Self-Service Password Management offers:

Email and text notifications that COSA network account is nearing expiration.

Self-Service Password Reset: Reset your forgotten password all by yourself.

Notification on Soon to Expire Passwords: COSA Active Directory Self-Service Automatically

notifies registered users by either email, text or both depending on enrollment at regular time

intervals when password is about to expire. Alarming a COSA user well ahead of time on a soon

to expire login password ensures that account lockouts are minimized to a bare minimum.

Capability to reset user password (non-2FA users) on the desktop or mobile app (ADSelfService)

available in the COSA Apps for City owned managed devices (managed devices will come pre-

loaded with the app) or the Apple App Store or Play Store for Bring Your Own Devices (BYOD).

2.0 Enrollment with Self-Service Password Management

The Self-Service Password Management program allows only those users who are enrolled in it by

answering a set of hint question and answers and/or by entering their mobile number and e-mail id to

perform a self-password reset.

The simple enrollment process involves selecting preferred challenge questions from an available list of

questions or adding self-framed challenge questions like 'what is your mother’s maiden name', 'what is

the color of your car' or any other question which the domain user feels specific to him and will challenge

any other unauthorized user from detecting his/her password identity. The answers provided to the

questions at the time of enrollment by the end user are stored in Self-Service Password Management and

are compared for verification of the end user at his next login. If a mismatch occurs the user is not

permitted to perform self-service password management functions and is prevented from logging in the

COSA Network.

3.0 Enrollment Process

A simple registration process, either from a workstation or mobile device wherein you provide “Self-

Service Password Management” some information about yourself. When you request a password reset,

the system uses this enrollment information to ensure that it is indeed “YOU” trying to reset “YOUR”

password.

COSA Self-Service Password Management User Guide

Page 4

Information that you will provide could be any or both of the following:

Security Questions & Answers

Email/Mobile Number to which a Verification Code will be sent to registered mobile device.

FOR YOUR INFORMATION: How COSA AD Self-Service verifies your identity?

Security Questions & Answers: During enrollment, you either choose or write your own

security questions, and store their answers. In the future, if you were to forget your

password and need to reset, Self-Service Password Management will ask you these

questions. Right answer establishes your identity and permission to self-service password

reset.

Verification Code: While enrolling with Self-Service Password Management, you will

provide mobile number/email address. Whenever you request password reset, the system

will send a code to the registered mobile number/email ID. You will have to enter this code

to reset your password.

Enrollment from website: In browser go to COSAWeb and select Self-Service Password

Management from the Technology Services at the bottom of page: You will be directed to the AD

Self-Service login page to login with your respective COSA credentials.

Click on the Enrollment tab:

COSA Self-Service Password Management User Guide

Page 5

Select the Security Questions tab:

At this stage, you will be provided with the following options:

Answering to an already configured Security Question(s)

Select the Verification Code Tab

You will be asked to provide our mobile number (if registering to use a mobile device) and email

addresses (COSA and/or Personal)

Enter information you would like to enroll and Click “Enroll”

You will receive successfully enrolled confirmation E-mail

COSA Self-Service Password Management User Guide

Page 6

4.0 Mobile Application

Mobile Application can be downloaded for Apple and Android application stores:

Enrollment Process Methods:

(A) Enrollment Using Security Questions & Answers

(B) Enrollment by Verification Code.

(C) Mixed Method (Using Security Questions & Answers; Verification Code)

Enrollment from Mobile App: Download ADSelfService from the App store.

Application in the Apple Store

When opening the app for the first time you will need to allow notification to be sent to your mobile device by selecting “Allow”

COSA Self-Service Password Management User Guide

Page 7

You will be returned to the main screen and the next step is to configure the server settings to connect to COSA AD Self-Service.

Clicking on any option will pop up a dialog telling you to configure server settings. Select “OK”

COSA Self-Service Password Management User Guide

Page 8

Enable https and enter the settings below and click “Done”

You will receive a notification that the COSA administrator would like to send notifications. Select “Yes”

Login using your respective COSA credentials and click “Done” to complete the notification setup. This will allow you to receive notice of password expirations and verification code to your mobile device.

COSA Self-Service Password Management User Guide

Page 9

Upon successful login you will receive a completion notification. Click “OK”

The app will display the Change Password Screen, and you are ready to reset your password or

Sign Out of the app until a password reset is needed. Procedures for using the app are in Section 5.

Note: If you did not enroll using the web browser procedures above you will need to complete

COSA AD Self-Service enrollment (browser enrollment is recommend for ease of use) however,

you can use the following steps if enrolling from the mobile app.

Mobile Enrollment after first login: Click on in the upper left corner and select “Enrollment”.

COSA Self-Service Password Management User Guide

Page 10

Two tabs will appear on the Enrollment screen: Security Q&A and Verification Code.

Select the security questions and answers you would like to use. In the future, when you request a

password reset, the security question option is available if you have forgotten your password. When using

this option to reset password Self-Service Password Management will ask you these questions to verify

your identity.

Next step is to click on the Verification Code tab. This is where you can add your mobile phone if you

would like to get a text with a verification code that can be used to reset your password. You also enroll

your email addresses (COSA or personal) where you would like to be able to get the verification code.

COSA Self-Service Password Management User Guide

Page 11

Once you complete both tabs, click the “Update” in the top right corner. This completes the enrollment

and you will be able to change your password at this point or you can Sign Out of the app.

Click on in the upper left corner and select either “Change Password” or “Sign Out”

COSA Self-Service Password Management User Guide

Page 12

If selecting Change Password. Enter your current password, new password and confirmation then click

on “Change” in the upper right Corner.

COSA Self-Service Password Management User Guide

Page 13

5.0 Reset your Forgotten Password

1. Access Self-Service Password Management through a web browser. On the left half of Self-

Service Password Management, you have two large buttons: one labeled “Forgot your password”

and the other “Unlock your account”.

2. Click on the “Reset Password” button. You will be asked to give your username.

User name = COSA USER ID (Example: Employee Number 111111)

3. After you provide username, you will be directed to the page where you can authenticate

yourself. There are 3 kinds of authentication methods:

A. Use my security answer to very my identity

B. Send Verification Code to my registered email

C. Send Verification Code to my registered Mobile

COSA Self-Service Password Management User Guide

Page 14

(A) To reset using your Security Q & A, then select radio button “Use my security answer

to very your identity”

COSA Self-Service Password Management User Guide

Page 15

(B) To use Verification Code sent to your registered email, select radio button

“Send Verification Code to my Email id”

Enter the code sent to your registered email address. The Verification Code is usually an

eight digit number, and used to verify your identity in the password reset process.

(C) To use Verification Code sent to your registered mobile device, select radio button

“Send Verification Code to my mobile Id”

COSA Self-Service Password Management User Guide

Page 16

Enter the code sent to your registered Mobile Number. The Verification Code is usually an eight

digit number which is entered to verify your identify in the password reset process.

NOTE: CAPTCHA: A word verification image which serves for the purpose of increasing

the security of your account. Enabling/Disabling the CAPTCHA is in the hands of your IT

administrator. Refresh CAPTCHA option: In case of having trouble while deciphering the

CAPTCHA code, you can switch it by clicking on the icon.