Restricting login to only a link

tford

I am beginning to build a new system that has one group of users that I'd like to restrict to only being able to login & access their visual perspective via a link which was sent to their email. They will not even know the user name & password that got them into the system. I know how to create the links & put them in the emails to the users, but don't know how to restrict their access if they were to somehow get to a login screen. My goal is that they never even see a login screen.

When they are done in the system, I'd like them to click a "Done" button which then logs them off of the system & does not take them to an AwareIM login screen, but instead displays our organizations website home page or a thank you page on our organizations website.

Is this possible?

kklosson

I presume you've seen the Example of typical URLs in the user guide. This seems doable but obviously exposes the credentials in the URL. This would be a good time to use two factor auth such as a PIN that they have to know. If you want them to know and see nothing with regard to login, it's asking a bit much in my view. But it sounds like maybe these users just come in for a single session, fill in a form or something, then are gone. That's easy to manage and since you can basically nullify their credentials upon login, it's not a big risk.

hpl123

Tom,
Off the top of my head, you can probably create a custom solution to do what you want. Here are some thoughts:

Play around with firstCommand in the link sent to the user. You could probably use a process in firstCommand that changes a special flag/attribute (for example LinkLogin=Yes) and you could then use a check somewhere for example in VP initialization or after startup options to check if the flag is Yes: display perspective and also reset the LinkLogin to No, or if it´s No: do not allow the login / logout and redirect user to company site.

I am not sure if the firstCommand is executed BEFORE or AFTER the VP has been shown, if it´s AFTER, you can use another empty VP as the VP the user logs into and then the firstCommand as explained above is executed.

BobK

Tom,

Here is another possibility:

Assuming these users have their own Access Level, the default VP for these users could have just a logout menu option and a HTML message like “Restricted Site” or what ever you like. This way, if they do find a way to login, they can not do or see anything except log out.

On your link include the perspective parameter which will take them to the correct VP for them to work in.

When they are done in the system, I'd like them to click a "Done" button

Is this button a menu item or a custom button?

hpl123

BobK wrote
Tom,

Here is another possibility:

Assuming these users have their own Access Level, the default VP for these users could have just a logout menu option and a HTML message like “Restricted Site” or what ever you like. This way, if they do find a way to login, they can not do or see anything except log out.

On your link include the perspective parameter which will take them to the correct VP for them to work in.

When they are done in the system, I'd like them to click a "Done" button

Is this button a menu item or a custom button?

Event better / simpler. You also could use this custom logout in the default VP so the user is automatically redirected to your company website if they manage to log on via login form (meaning they don´t have to press logout):
https://forum.awareim.com/d/6003/14&hilit=logout+workaround#p27064