Skip to main content

Create and manage KBA questions for users

During registration or enrollment of a knowledge-based authenticator (KBA), the user selects several questions and provides easily-remembered answers. Later, when they are challenged with one or more knowledge-based questions, they can answer them to authenticate. You can allow the user to alter the answers at any time, provided they are logged in to IDaaS.

A question can only be included in a user's KBA if the language preference matches the language of the question created.

Before you add or disable questions, review your language coverage. Users can only enroll and answer questions that are available in their selected language.

You can do the following:

Disable questions​

You cannot delete system questions, but you can disable them. When disabled, the question is not available to users for KBA authentication.

  1. Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears. By default, the System Defined Questions appear.

  2. Do one of the following as required:

    1. Click System Questions.
    2. Click Custom Questions to access the list of Custom Questions.

  3. Click to disable a question.

  4. Click to re-enable a question.

Disabling a question removes it from future challenge selection and future enrollments, but it does not delete the question record.

Create custom questions​

  1. Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears.
  2. Click Custom Questions.
  3. Select the localized language from the drop-down list.
  4. Click Add. The Add Question dialog box appears.
  5. Enter the Question.
  6. Click Save. The question appears in the Custom Questions list page.
  7. Repeat these steps to add more questions.

Use clear wording in custom questions so users in each language can understand and answer them consistently.

Edit and delete custom questions​

  1. Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears.
  2. Click Custom Questions.
  3. Do the following as required:
    1. Click the question you need to edit. The Edit Question dialog box appears.
    2. Edit the question and click Save.
    3. Click and click Delete on the confirmation prompt to delete a question.

When you delete a custom question, it is no longer available for new enrollments or future challenge selection.

Validate your changes​

After you add, edit, disable, or delete questions, verify the following:

  1. The question list reflects the expected status in the selected language.
  2. Disabled questions are not available during question enrollment.
  3. New or edited questions appear with the expected wording.
  4. Deleted questions no longer appear in the custom question list.