This part demonstrates how a Help Desk user accesses and uses the FastPass Password Manager solution to generate a Help Desk PIN to a user that has called the Help Desk for help resetting his password. The user in the Help Desk is Karen Phillips and the user needing help is John Doe.

Note: In the preinstalled environment this scenario is demonstrated by logging in to the WINXP machine with user id “karenp” and password “Passw0rd”.

Karen is accessing the solution from a computer on the corporate network which is typically seen as an authentication by itself but since this company is very concerned about security the configuration requires a two factor authentication on top of this. Karen is requested first to use password and then SMS PIN code.

The Help Desk user Karen Phillips is receiving a call from a user John Doe who has forgotten his password.

Karen is opening an Internet Explorer and points it to the FastPass Client interface where she clicks on the "Assign Help Desk PIN" menu item.

She is now asked to identify herself.

She specifies her user ID karenp (KP####) and selects the domain in which her account exists and clicks on the "Continue" button.

Note: The system now connects to the Active Directory and checks if the specified user ID is valid and collects all relevant attributes about the user and saves it to the FastPass Data Storage.

Since she is both a valid user and a member of one of the Help Desk Users groups she is now asked to authenticate using password and she enters "Passw0rd" and clicks on the "Continue" button.

Note: The system now checks the entered password against the Active Directory.

Since the password is valid she is now asked to authenticate using a PIN Code.

She waits for it to arrive to her mobile phone and when it does she enters it and clicks on the "Continue" button.

Note: The PIN Code authentication is requested because the company has a highly secured configuration. The PIN code is by default case sensitive but this is configurable as well as the characters used in and length of the PIN codes.

Authentication is now considered done and the solution is ready to be used.

She is now asked to enter User ID of the user needing help and she enters johnd (JD####), selects the domain and clicks on the "Continue" button.

Note: The system now connects to the Active Directory and checks if the specified user ID is valid and collects all relevant attributes about the user and saves it to the FastPass Data Storage.

Since the entered user id is valid and member of a group allowing him to use the FastPass Password Manager solution she is now presented with some configurable user details.

Since Karen Phillips (the Help Desk user) is member of a group allowing her to both send and view, she is given the choice to uncheck "Send PIN by SMS".

She uncheck the "Send PIN by SMS" option and clicks on the "Continue" button.

The system now presents her with the PIN.

She instructs the user how to open a web browser and point it to the FastPass system and of which menu to select, how to identify and then reads the PIN to him.

Note: We take as granted that the forgettable user has a web browser available or is using the FastPass Password Manager Windows Client (GINA extension).