Skip to main content

Create and manage KBA questions for users

During registration or enrollment of a knowledge-based authenticator (KBA), the user selects several questions and provides easily-remembered answers. Later, when they are challenged with one or more knowledge-based questions, they can answer them to authenticate. You can allow the user to alter the answers at any time, provided they are logged in to IDaaS.

A question can only be included in a user's KBA if the language preference matches the language of the question created.

You can do the following:

Disable questions​

You cannot delete system questions, but you can disable them. When disabled, the question is not available to users for KBA authentication.

  1. Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears. By default, the System Defined Questions appear.

  2. Do one of the following as required:

    1. Click System Questions.
    2. Click Custom Questions to access the list of Custom Questions.

  3. Click to disable a question.

  4. Click to re-enable a question.

Create custom questions​

  1. Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears.
  2. Click Custom Questions.
  3. Select the localized language from the drop-down list.
  4. Click Add. The Add Question dialog box appears.
  5. Enter the Question.
  6. Click Save. The question appears in the Custom Questions list page.
  7. Repeat these steps to add more questions.

Edit and delete custom questions​

  1. Click > Configuration > Knowledge Base Authentications. The Knowledge-based Authenticators page appears.
  2. Click Custom Questions.
  3. Do the following as required:
    1. Click the question you need to edit. The Edit Question dialog box appears.
    2. Edit the question and click Save.
    3. Click and click Delete on the confirmation prompt to delete a question.