Automated Biometric Password Reset System Reduces Service Desk Volume and Enhances Security
Industry:
HealthcareTechnology:
n8n, ai, twilio, clear, azure, service nowDelivery:
1-800 Change-My-Password with Biometric ValidationImpact:
This project aimed to revolutionize the password reset process within a healthcare organization.Background:
In today’s fast-paced healthcare environment, securing access to sensitive information while ensuring operational efficiency is critical. The client, an organization with 3000 employees, faced an overwhelming challenge: a high volume of password reset requests. These requests represented the leading reason for service desk calls, which were costly and time-consuming. The legacy system of using knowledge-based questions posed security risks, as these questions could often be guessed or researched. Additionally, employees who were locked out of their accounts experienced frustration, leading to lost productivity and increased downtime. Recognizing these issues, the organization sought a transformative solution that would not only decrease the burden on service desk agents but also enhance the overall security of account access. The requirements were clear automate password resets while providing a seamless user experience to align with modern security protocols.
Challenge:
The primary challenge was the overwhelming volume of password reset calls, comprising a significant portion of service desk interactions, translating to high operational costs and extended wait times for users. Coupling this with security risks from legacy knowledge-based authentication meant that unauthorized users could potentially gain access to sensitive accounts. Locked-out employees faced frustrating delays in regaining access to their accounts, leading to decreased productivity and erratic workflow. Moreover, without a complete and auditable record of password changes, compliance and security audits became cumbersome. Therefore, there was a pressing need for a sophisticated, user-friendly solution that could efficiently address these challenges—reducing costs, improving security, and maintaining a seamless user experience.
Objectives:
The client needed an automated solution to handle password resets and account unlock requests via a dedicated 1-800 phone number with biometric validation. This project’s primary objectives included decreasing the service desk call volume, enhancing security by replacing old authentication methods, and ensuring speedy account recovery for locked-out employees. The solution must also maintain an auditable log of all password changes and align with strict security protocols.
Solution:
The delivered solution utilized advanced automation technology through a dedicated 1-800 Change-My-Password service, leveraging n8n, Twilio, and biometric validation providers Clear and Personal. The process begins when users call the dedicated number, where they are prompted to provide their username or employee ID. Upon entering their information, the system initiates a biometric validation process via API integrations that assess voice or facial data. If the biometric validation successfully meets the security threshold, the system automatically unlocks the user’s account and resets their password in Active Directory/Azure AD. The new password is then securely communicated to the user via SMS or through a one-time verbal code. This seamless orchestration encompasses all actions while ensuring tight security measures, such as limiting validation attempts to two and escalating any failures to a human agent. Additionally, every interaction, including validation results and timestamps, is meticulously logged in an ITSM system like ServiceNow, ensuring a comprehensive audit trail for compliance and security monitoring. This integrated approach not only streamlined the password reset process but also fortified security practices by enforcing biometric verification, thereby transitioning the organization towards a more self-service model in line with zero-trust principles.
Results:
The implemented automated password reset solution achieved remarkable results. The service desk deflection rate soared above the target of 75%, successfully automating more than 75% of password reset calls. The mean time to resolution (MTTR) for successful resets dropped to less than one minute, greatly improving user experience and operational efficiency. Furthermore, the failed biometric validation rate remained below the target of 5%, demonstrating the accuracy and reliability of the biometric systems in place. Enhanced security became evident as the organization no longer relied on outdated knowledge-based questions, thereby mitigating a significant security risk. Ultimately, the combination of reducing service desk workload and creating an efficient self-service environment resulted in increased productivity for employees, who no longer faced lengthy wait times for account recovery. Through continuous data logging and auditing, the organization maintained compliance with relevant regulations, ensuring accountability and transparency in their password management processes.
Benefits:
The transition to an automated biometric password reset system yielded several critical benefits. Firstly, operational costs drastically reduced due to the significant deflection of service desk calls, allowing resources to be better allocated towards more complex issues. Secondly, security was substantially heightened as the reliance on insecure knowledge-based solutions diminished. The immediate nature of biometric authentication not only streamlined the password reset process but also safeguarded user information against unauthorized access. Employees experienced increased productivity with quicker access recovery, translating to a more efficient work environment. Furthermore, with every action meticulously logged, the organization benefited from an auditable structure that satisfies compliance obligations, reinforcing trust and accountability in their identity and access management practices.
