...
The sign-in page handles the first two authentication types.
Basic authentication.
Account creation.
Customers can create accounts using an email address. On the Sign in page there is a link to the Sign up form.
...
After a successful registration, a confirmation email is sent to the provided email address. The email contains an activation link. Once the link is used, the account is activated and ready to use.
...
Password reset.
User can request a password reset on the sign-in page using the “Forgot?” link. An email will be sent to the provided address with a reset link.
...
After using the reset link, user can set up a new password.
...
Password requirements.
The password requirements can be set up using the VSS->Service-> Service Resource Scheduling->Customer Portal->Authentication->Set Password Requirements IMG node.
If not specified, the default requirement is :8 characters or more, 1 Uppercase, 1 Lowercase, 1 digit, 1 special.
...
Single-Sign-On with OpenID Connect
The Customer Portal offers single-sign-on with OpenID Connect. It’s possible to use multiple identity providers at the same time.
...
| Info |
|---|
Please note that identity providers need to be set up separately on every system. |
Access with resource token.
Customers without an account can perform all actions on their service orders and appointments by using links from received order processing notifications (email, SMS, ...). The notifications are sent from the VSSCommunication Framework in response to various events. The links in the notifications contain resource tokens that allow interaction with a single order or appointment.
Protecting the application with reCaptcha V3
The application and the underlying REST services can be enabled to use reCaptcha V3 as way to protect from spam and abuse.
For reCaptcha to work it’s required that the default user role requires reCaptcha verification. This setting can be made in the VSS->Service-> Service Resource Scheduling->Customer Portal->General Settings->Maintain user roles IMG node.
...
Additionally, it’s required to provide secret key and site key in the VSS->Service-> Service Resource Scheduling->Customer Portal->General Settings->Mainatin Customer Portal Parameters IMG node.
Parameter name | Meaning |
|---|---|
RECAPTCHA3_SECR_KEY | reCaptcha Secret Key |
RECAPTCHA3_SITE_KEY | reCaptcha Site Key - Google |
...