Account Create policy

Edit online

The Account Create policy enables users to create new accounts for themselves. This policy uses the ReCAPTCHA mechanism to verify that the requests originate from a human and an Email OTP to ensure that a valid email address is being used.

Account Create setup

  • Ensure that the Prerequisites steps are completed.
  • Configure the reCAPTCHA Verification mechanism. See Configuring the reCAPTCHA Verification authentication mechanism.
  • Configure the Email OTP delivery mechanism to be used in the Account Create authentication policy.
    1. Log in to the local management interface.
    2. Click AAC.
    3. Under Policy, click Authentication.
    4. Click Mechanisms.
    5. Click Email One-time Password.
    6. Click Edit.
    7. Select the Properties tab and configure the connection to the SMTP server.

HTML templates

  • authsvc/usc/account-create/collectEmail.html
  • authsvc/authentictor/macotp/login.html
  • authsvc/usc/account-create/collectProfile.html
  • authsvc/usc/account-create/success.html

JavaScript Mapping Rules

  • USC_CreateAccount_CollectEmail
  • USC_CreateAccount_CollectProfile
  • USC_CreateAccount_Success

Creating a new account workflow

The Account Create authentication policy enables users to create new accounts with the following workflow.

Note: The new accounts that are created under this workflow are of the type basic users.
  1. The user accesses https://<WebSEAL host>:<port>/mga/sps/authsvc?PolicyId=urn:ibm:security:authentication:asf:uscAccountCreate
  2. On this screen, the user is prompted to enter an email address and CAPTCHA.
    • The template page that is presented is authsvc/usc/account-create/collectEmail.html
    • The JavaScript that pre-populates the form and validates responses is USC_CreateAccount_CollectEmail
  3. On the next screen, the user is prompted to enter an OTP.
    • The OTP is delivered via Email.
    • The template page that is presented is authsvc/authentictor/macotp/login.html
  4. On the next screen, the user is presented with the enrollment form.
    • The template page that is presented is authsvc/usc/account-create/collectProfile.html
    • The JavaScript that pre-populates the form and validates responses is USC_CreateAccount_CollectProfile
  5. On the next screen, the account success page is presented.
    • The template page that is presented is authsvc/usc/account-create/success.html
    • The JavaScript that pre-populates the template and ends the policy is USC_CreateAccount_Success.