System security
Hi Support,
Would it be possible to add the following administrative features for the customer portal and support reps when SC+ isn't integrated into AD:
1. Force the user to change their password when they next log in
2. Force a level of security in passwords
3. Proxy login - allow an administrator the ability to mimick a contact to see exactly what they see without the contact having to relay their password
4. Set an account lockout figure following n consecutive login failures
5. Password reminder system for contacts
The customer portal is great, but it's not at all secure (I'm certain it wouldn't pass even a basic penetration test) and even one or two of the above would help to make it an even better enterprise product.
Thanks in advance,
Andy
Would it be possible to add the following administrative features for the customer portal and support reps when SC+ isn't integrated into AD:
1. Force the user to change their password when they next log in
2. Force a level of security in passwords
3. Proxy login - allow an administrator the ability to mimick a contact to see exactly what they see without the contact having to relay their password
4. Set an account lockout figure following n consecutive login failures
5. Password reminder system for contacts
The customer portal is great, but it's not at all secure (I'm certain it wouldn't pass even a basic penetration test) and even one or two of the above would help to make it an even better enterprise product.
Thanks in advance,
Andy