Security questions increase CAREWare security by having users answer predefined questions during account unlocking procedures. Users that were locked out, need to complete these questions known by CAREWare users in order to regain access to the features in CAREWare they had permission to access. Until the questions are answered, button in CAREWare are greyed out. The exception is the My Settings button, where users can change their password or answer the security questions to regain access to CAREWare. This features adds another layer of security for CAREWare, ensuring that the person logging in and the person unlocking the account are part of the organization that uses CAREWare and therefore should have access to the provider's data.

To setup security questions, follow these instructions:

 

1. Login to the Central Administration domain.

2. Click Administrative Options.

3. Click Advanced Security Options.

 

 

Note: Security Questions need to be setup first prior to enabling the feature. If security questions were missing and the feature were enabled, users would be unable to complete the questions and therefore unable to regain access to the features they had permission to access. The security questions must be established and they need to be known to users.

 

4. Click Security Question Setup.

5. Click Add.

6. Enter a security question.

7. Click Save.

8. Continue adding as many user security questions as necessary.

 

 

9. Click Security Challenge Settings.

10. Click Edit.

 

Note: As seen in the Security Question Settings, setting the number of questions required to zero disables the security question feature. Setting that value to any number greater than zero enables security questions. Make sure that security questions are properly setup prior to enabling this feature.

 

11. Enter a number between 1-3 in the # of questions users are required to answer field.

12. Enter the number of max failed attempts a user has before lockout.

13. Click Save.

14. Click Back.

Once the security questions have been created CAREWare users need to create answers to the question(s) in order to complete the setup on their end and regain access to CAREWare.

 

Until users create answers to the security questions or until users answer those questions after having their account reset in the future, the main menu in CAREWare has the buttons greyed out except for My Settings.

 

In order for users to provide the answers please have them complete these steps:

 

1. Login to CAREWare.

2. Click My Settings.

 

 

3. Click Security Questions.

4. Click Edit.

 

 

5. Chose a question from the Question 1 pull down menu

6. Provide the answer to the selected question.

7. Repeat steps 3 & 4 for the remaining question pull down menu.

8. Click Save.

9. Click Close.

 

 

Once this is setup, a user that has had their account reset, meaning their password changed, their account unlocked, their two factor authentication reset, or if the Password Reset Manager has been enabled, unlocked their own account by entering a password reset token from an email, now need to answer these security questions to regain access to CAREWare.

 

If a user is locked out, that user needs to have their account unlocked. Once the account is unlocked the user can log into CAREWare.

 

A CAREWare Administrator needs to click Reset Password in the Provider User Manager and send the user a reset token.

 

 

The user needs to enter that token in the login screen.

 

 

The user needs to enter a new password. One that is distinct from the prior password.

 

 

The user needs to log in with that new password. At that point the user needs to begin answering the questions to complete the login process.

 

 

The user needs to answer the questions quickly or the login process times out and the user needs to start over.

 

 

If a user answers a question incorrectly, they can retry a number of times based on the number entered for the setting Max failed attempts before lockout. If that number if 3, then the user can try three times before they need their account unlocked again.

 

Once the security questions are answered correctly, the user has access to the main menu again.