Oracle Cloud Infrastructure Documentation

Configuring Account Recovery

Configure account recovery an identity domain in IAM so that users can regain access to an identity domain.

  1. Open the navigation menu and click Identity & Security. Under Identity, click Domains.
  2. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want.
  3. On the domain details page, click Security.
  4. On the Security page, click Account recovery.
  5. Choose at least one factor to be used for account recovery.
    • To allow users to answer security questions before they can recover their password, select Security Questions and then click Configure to define the settings for the security questions.
    • To allow users to specify an email address to recover their password, select Email and then click Configure to define the email settings for the notifications sent to the user.

      If this option is already selected and you clear the checkbox, then click Deactivate Email in the Deactivate Email? dialog box

  6. For Maximum consecutive unsuccessful recovery attempts, specify the number of consecutive, unsuccessful account recovery attempts after which the user's account recovery is locked. Enter a number between 1 and 99.
  7. For Lockout duration (minutes), specify (in minutes) how long the user's account recovery is locked (because they exceeded the setting in Maximum consecutive unsuccessful recovery attempts) before the user can try to recover their account again. Enter a number between 5 and 9,999.
  8. Click Save changes.