EWS Password reset
EWS does not currently have a way to have users reset passwords for a set amount of time (example 90 days). But not having this feature available when audit time comes my auditor company gives us a finding on this. It's standard protocol to have users reset password for a certain amount of time. It seems like a huge security risk to not have this. Or at the least have a report to show when the user last changed the password so they can be reminded to change the password.
Comments: 2
-
04 Nov, '21
Anonymous MergedAn URL for “Forget User ID/Password” to have an employee reset login information through an email notification for the EWS module. The goal is to expand the use of the Account Setup feature to add-on authorization to avoid security issues if someone obtains a user employee ID number and the last four digits of the social security number.
-
17 Nov, '21
Suzanne Admin"Use an URL in the EWS module to reset a forgotten ‘User ID’ or ‘Password’" (suggested by Anonymous on 2021-11-04), including upvotes (1) and comments (0), was merged into this suggestion.