Sending Login Credentials in a Notification

kklosson

I've created a Notification to invite a user to the system. All is well accept that when I include:

<<BO.Password>>

in the message, the messages forms to @@BAS_PASSWORD@@

How do get past this one please?

aware_support

Password is encrypted, you cannot send it in a clear format to someone else. If you have to do it, then you need to store an additional attribute (clear password) and then assign the real password to the value of the clear password in rules (I think Aware IM will automatically perform the encryption). You will then send the clear password.

kklosson

Hmmm. It appears that when I do that, it only copies the encrypted information so I get the same result.

aware_support

The user has to enter the password as an ordinary attribute, not as a password (in clear format). THEN you should assign the clear value to the real password value, not the other way around. If you do this, there is no way that the clear value will be encrypted.

Sergej

aware_support wrote
Password is encrypted, you cannot send it in a clear format to someone else.

Can it be sent in other format so created by manager newly client-user could receive his account info- passord and then be able to login to system?

kklosson

I believe the answer is in the thread. You will have to make a duplicate attribute (clr_password) and copy the password attribute to it when created. Then use that attribute to send to users. I'm doing this with no trouble. It also begs for a change password routine when that user first logs in. Hope this helps.

Sergej

I tried it but couldnt get it work.
I used rule: If BO IS NEW AND BO.PasswordClear IS DEFINED
Then BO.Password=BO.PasswordClear and checked "Use rule in dynamic recalculation form".

When I create BO, enter PasswordClear and press Create button I am asked to re-enter password, so I type password that I entered in PasswordClear field and it displays error message- passwords are different.

Sergej

I cannot uncheck requires confirmation.

kklosson

If that is the password filed that Aware sets up for the object, then no, you can't, and you don't want/need to. You need to make another attribute to replicate the password filed, but do not check the "Password" item.

Sergej

I just missing something.
Yes it is Password attribute above. And also I have PasswordClear attribute with password field unchecked.

Why cant I uncheck "requires confirmation" in Password attribute? I dont want managers to reenter password when they are create new client. I want password to be generated and set to client in order him to login and change it.

kklosson

That I do not know.

rocketman

Try opening the form from a process hen put the clear pasword assignment after the enter new command, take the rule OUT of the bo rules.

So now the real password field should get filled AFTER the user has presed save and the confirmation request should not fire:

ENTER NEW [BO Name] using [form name]
BO.RealPassword=BO.ClearPassword.

I tend to name the clear password field with something that is not obvious and is also misleading, such as AddressLine7 or MothersName - just to fool hackers

Sergej

Thanks, I will try it all.

I think such clever system as AwareIM MUST HAVE autogenerated password feature because it is not a manager's job to create and enter user's password.

In my old crm system I used before it worked like this, when users are created by manager they just receive their autogenerated password.

Sergej

rocketman wrote
Try opening the form from a process hen put the clear pasword assignment after the enter new command, take the rule OUT of the bo rules.

But process-operation button cannot be used when BO IS NEW.

rocketman

Create a menu item - Add New [BO name]. For this menu item don't use create object, use Start process. The process then has two lines

ENTER NEW [BO Name] using [form name]
BO.RealPassword=BO.ClearPassword.

The second line will not fire until you have saved the record

Sergej

rocketman, thank you very much. Now it works, also I needed to delete password from the form presentation.