Customer Portal Password Reset Form

[rseiwert]

I was wondering if there was a Customer Portal Password reset form and any scripts for when the web access is modified via the lan client to notifiy the customer of their new credentials.

[RJLedger]

Basically - no.

Some BP's may have done customizations here for their clients. We have. One of them is to allow an email address as the username. Another is to send an email to the portal user w/credentials when:

   a - they are initially granted access

   b - when credentials are changed

On our own Customer portal we assign all passwords and never let a client do their own.. too many security risks involved. I'm thinking of adding a request a new password feature in case they forgot it.. and send it to the email(1) address in the contact record.

[rseiwert]

Just a comment on "own Customer portal we assign all passwords and never let a client do their own.. too many security risks involved".

I find the existing system a find violations of what I would consider basic "best pratices". Having a user assign a password and then share it with the user. Not allowing the user to reset their own password. Password length limit of 8 characters.

Simple enough to implement I would assume and what I would expect as a min out of the box functionality would be as follows. First of all a Saleslogix user would initiate an "invite" to the customer portal where the customer would get a temporary password and login instructions via email. When the customer logs in for the first time the are asked to change their password. This password complexity requirements can be set by the site admin.  Also limiting someone to 8 chars like the Saleslogix does is very short sited. I would have 8 characters as the min and not the max.

A customer who forgot their password could also initate a password reset which would be the same as the inital invite process, where the request a password reset, maybe answer a security question (or not) then their password is set to a temporary password and set to their registered email address.

[RJLedger]

Well.. you could improve the password setup. It is fairly easy to extend the length of it to 8 (or more). You can also setup a scheme that you describe on having the use choose a password based on a set of business rules you have put in place.

The OOTB SalesLogix was never intended to meet everyone's needs and requirements but to provide a platform that can be modified... and it can be done. This way no one approach is forced on anyone.

[rseiwert]

I understand why OOTB functionality is limited but what I described is basic and implemented by default on most other solutions.

I think your arguement is a justification of a shortcoming in the product and if accepted by others will stifle product development.

[RJLedger]

Just reflecting the reality of 11+ years working w/SalesLogix.

I suggest you make a post to the "IdeaLogix" forum if you would like to see Sage consider making these feature enhancements. 

Message Edited by RJLedger on 02-15-2010 03:16 PM

[tagersea]

I agree that the password scheme needs to be revisited. This is something that should not have to be reinvented by every customer that wants to use the Customer Portal.

[RJLedger]

Do not disagree.. but AFAIK it's just not on the (SLX) road map. IdeaLogix is one way to get it started.