Creating User Names and Passwords

From DOC

Contents 1 Introduction 1.1 Implementation Decisions 1.1.1 Allow Demonstration Users 1.1.2 Back-up Passwords 1.1.3 Back-up Password Question 1.1.4 Invitation E-mail Address 1.1.5 Invitation Expiration

Introduction

This section of the Implementation Guide explains the basic constructs behind creating user names and passwords.

Tolven-enabled users can be created using an e-mail authentication process. In the process of creating a user name and password that will enable them to gain access to a Tolven installation, users must send an e-mail to the individual responsible for creating the account for their identity to be confirmed.

It is possible for users to create demonstration (only) accounts without using the e-mail authentication process. Tolven strongly recommends the e-mail authentication mechanism on production systems for the creation of user names and passwords.

Implementation Decisions

When implementing Tolven, a decision needs to be made regarding the following:

Allow Demonstration Users

This profile removes the option from the log in screen that enables the creation of demonstration users.

Back-up Passwords

This option forces individuals creating usernames and passwords to back up their password using a series of questions and responses to enable them to gain access to the system should they forget their password.

Back-up Password Question

This sets up questions that account creators must answer correctly to regain access to the Tolven system should they forget their password.

Invitation E-mail Address

The confirmation e-mail associated with the registration process will be sent from this e-mail address.

Invitation Expiration

This defines the time period an e-mail invitation will remain valid before it expires. If the invitation expires, the account creator must re-commence the process.