End-user Interface

Majid Latif

Introduction

Every user has a personal profile within the system, providing the user with a way of logging in and managing their account, from editing personal information, changing passwords on more than one system, and completing their security details, needed to carry out any password self service function such as password reset. This articles covers the key components of the user profile page from the perspective of the end user.

 

Interface

From the user profile page, you can perform the following functions:

  • Update personal details – the administrator can remove or add further attributes you can self manage.
  • Update security details - depending on what the admin has enabled you can expect to see one or more authentication menu items, in this screenshot, the admin has only enabled Security Questions.
  • Change passwords –  users are able to change password to one or more user directories before their password expires (LogonBox supports passowrd near expiration, notifications).
  • Mobile access – LogonBox supports mobile access, allowing users to manage their account on the move, if the admin has given the permissions this menu item displays the URL as a QR code, which users can scan for the mobile app to connect.

 

Authentication

In order for a user to perform a self-service function they need to complete all authentication modules configured by the admin, these will be listed in the top menu.

In the image above LogonBox requires Security Questions and PIN to be completed before this user can reset their passwords or unlock their accounts.

Note: If profile reminder emails have been enabled, users will also be emailed on a schedule informing them which authentication modules need completing.

 

Personal Details

Users can also update their personal details, by default basic information is taken from the user directory, in most cases Active Directory attributes. The admin can set these to either be visible only or editable as well.

Note: The OTP (one-time passcode) authentication module uses the email address of the user as taken from the user directory and the mobile number from the user directory if SMS-based OTP is used.

Additional Attributes

The administrator has access to a plethora of attributes connected to the user directory such as Active Directory attributes as well as custom defined attributes, both of these can be marked as editable or read-only, so the list of attributes available can differ from the default shown in the images.

 

Conclusion

This article has shown how a user can manage their account, once their profile has all security details completed, they can then begin using the password self service featues. Licensing is also dependent on this, as profiles are completed, a seat is cosndered taken from a license. Armed with this knowledge a user can know start benefiting from LogonBox.