Re: [provision] Wiki use-case: ForgotMyPassword.

[Gary Cole <gary.cole@oracle.com>]

I have updated the ForgotMyPassword use-case on the wiki in response  
to comments during today's review.  For now, these are recorded as  
notes within the text of the use-case.  To recap briefly here, they are:
- variation: end-user could answer challenge-questions and then  
receive a generated password
- delegating to the web-app the checking of answers defeats the  
purpose of centralizing policies to be applied during ForgotMyPassword.
- for full lifecycle of the feature, describe use-cases around end- 
user setting/maintaining challenge questions and answers.

On Feb 28, 2011, at 10:25 AM, Gary Cole wrote:

> I saw no violent objection on the alias to the ForgotMyPassword use- 
> case, which would seem good, except that I saw no reaction at all. :-)
>
> Did everyone have a chance to read this (and/or look at the template  
> I came up with)?
>
> I haven't seen an agenda for today's meeting, so I'll post a  
> rudimentary agenda that includes reviewing this use-case (and  
> implicitly the template).
>
> On Feb 14, 2011, at 9:57 PM, Gary Cole wrote:
>
>> I have updated the Potential Use-Cases page (http://wiki.oasis-open.org/provision/PotentialUseCases 
>> ) to point to:
>> - a new template for a use-case (http://wiki.oasis-open.org/provision/TemplateForUseCase 
>> )
>> - a ForgotMyPassword use-case (http://wiki.oasis-open.org/provision/ForgotMyPassword 
>> )
>>
>> ForgotMyPassword replaces (but still points to) the original  
>> ExtendedPasswordResetRequest (http://wiki.oasis-open.org/provision/ExtendedPasswordResetCapabilities 
>> ).
>>
>> Please take a look at this ForgotMyPassword use-case.  I organized  
>> this use-case with the sections that I think each use-case should  
>> have, and I put those same sections into the template (along with a  
>> quick description of each), so if you want to dislike what I've  
>> done or have an idea to improve it, please speak up soon (before we  
>> go through and do the same type of thing to other use-case  
>> submissions).
>>
>> If there is no violent objection to the ForgotMyPassword use-case,  
>> I'll add (or will ask Richard to add) review of this use-case to  
>> the agenda for the next  meeting of the PSTC.
>>
>> Gary
>>
>> ---------------------------------------------------------------------
>> To unsubscribe from this mail list, you must leave the OASIS TC that
>> generates this mail.  Follow this link to all your TCs in OASIS at:
>> https://www.oasis-open.org/apps/org/workgroup/portal/ 
>> my_workgroups.php
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php