Enable self-service password handling in Digital Access

This article describes how Smart ID Digital Access component is set up so that end users can change and/or reset their own password. This can be used when passwords are about to expire, already have expired or when an end user have forgotten their password.

Prerequisites

• A license that enables self-service password reset is available.

• Notification channels are set up, see Set up email or sms notification channel in Digital Access.

• An authentification method with password is set up, see Set up authentication method in Digital Access.

• A user with account operator rights in the Active Directory (AD) or openLDAP is set up. This user can change and reset AD and openLDAP passwords.

• The AD has activated LDAPS.

Step by step instruction

Log in to Digital Access Admin

1. Log in to Digital Access Admin with an administrator account.

Configure user storage

1. In Digital Access Admin, go to Manage Accounts and Storage.

2. Click Certificate > Add Certificate Authority...

3. Select Microsoft Active Directory and click Next.

4. Enter general settings, see example below.

5. Check Use SSL.

6. Check Password change enabled.

7. Check Password reset enabled.

8. Click Next.

Enable end-user password reset

1. In Digital Access Admin, go to Manage Accounts and Storage.

2. Click Self Service > Password Reset.

3. Check Enable End User Password Reset.

4. Enter settings for the password. For help, click the ?-sign.

5. Enter SMS and mail messages if applicable.

6. Check Enable Time Locking of password reset requests.

7. Enter settings for time locking.

8. Click Save.

Related information

Last updated: September 02, 2026