✔ Integrate new trial account request and password management system - PENDING MIGRATION
Completed by Morgan M.
- Assigned to
-
Anil V.
Harsh P.
Stefanie G.
- Due on
- Notes
-
Further to requirements outlined here: Free Trial and Password-2FUsername Recovery Flows (3).pdf - ISLG Maintenance. Please integrate to new system for managing trial account requests and password.
This to-do has been created to start working on creating the subscriber management system to ensure we are no longer sending passwords to users via email. Please add any more details necessary to get this task underway.
Thanks,
Morgan
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4082/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4083/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4084/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4085/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4088/silent
Also,
Thanks,
Morgan
I'd like to keep this to-do open until we've fully implemented everything into the application.
At the same time,
Thanks,
Morgan
We haven't started with this task yet. We will let you know in case of any query or information during development.
In addition to the requirements above, we need to ensure that all passwords are encrypted when they are stored on the system.
Thanks,
Morgan
The Captcha is already available in existing resgistration page. We have set new Captcha in contact us form on dev.islg.
Please check and let us know the feedback.
Ryan
I am just refering the captcha which we added in contact us form.
We wanted to upgrade to Google reCAPTCHA: https://www.google.com/recaptcha/intro/v3beta.html#. Could we please integrate this into both the Trail Account and Contact Us forms. Let us know if you need more input on our end to set things up.
Also, further to
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4082/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4083/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4084/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4085/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4088/silent
Please let us know if you need any other information to get started.
Thanks,
Morgan
Just confirming that work on the new subscriber management system has begun. Please confirm, because ideally we'd like the new system in place before the end of next week (i.e., the GDPR deadline)
Thanks,
Morgan
We have started on this story but due to some other urgent tasks/issues e.g. Session timeout and page count, User archive system etc. we couldn't able to do much development on this. As per our analysis all tasks except "
#4085 Universal Account Password Reset" will be completed on dev.islg by end of next week. Hope this is fine.
Please provide following Email templates.
Thanks for the update. Getting things complete on dev.islg by the end of next week would be great.
Morgan
Just use the button in the right bottom corner to see all screens and you'll see the others labelled email.
Morgan
I spoke to
In the meantime, I'll provide comments in the wireframes for any necessary copy edits.
Thanks,
Morgan
I've inserted my comments into the wireframes for email templates. Just some minor copy adjustments.
In additional to the email templates,
Also, we'll need to erase all the data in the Administrator Comments field for all user accounts: http://dev.investorstatelawguide.com/subscribers/AddUser?id=154&group=960&status=-1&city=0
This was commonly used by admin users to store passwords. We'll need ensure this data is delete, and stop the practice going forward.
Finally, the current TargetProcess user stories only deal with the general member site login system, but we'll need to make similar changes to the Admin user system and Group Manager functions for the Notepad Feature. Both still rely on an administrator creating the password on behalf of a user, and sending it to the user via email.
Thanks,
Morgan
those who create individual logins: https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4088/silent
and those who don't:
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4085/silent
Was there additional functionality needed on top of these?
You're right. These deal with the Group Manager functions. However, I don't think these deal with admin users, which are currently managed here: https://www.investorstatelawguide.com/Administration/Index
Morgan
Here are the two additional user stories to account for inviting n new group manager and inviting a new ISLG admin:
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4664
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4665
Note that the second link above isn't working for me.
Morgan
I have made some additional comments in the wireframes: https://invis.io/UZG6XQ2K5QR#/283298403_Email-_Recover_Username. Please ensure these get integrated into the user stories and email HTML templates that are produced next week.
To clarify what development work needs to done, I believe all the user stories pending work your review are available here: https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/4786758857233429686&appConfig=eyJhY2lkIjoiMzVBM0FCNTQwOTE1NTEwN0FGQUJDRTVEOTQ3MkY0QkUifQ==
Thanks,
Morgan
Wireframes and User stories have been updates based on our comments on wireframes
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4082/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4083/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4084/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4085/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4088/silent
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4664
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiQTIzMTk0QTg5RTkwMjYzMjdDNTdENDk5QUJCNzU4RTIifQ==&boardPopup=userstory/4665
We have developed new trial account requests and password management system and uploaded on dev.islg.
We are still working on the Invite User, Admin invite group manager and Invite new admin stories and will update you soon.
We have encrypted the password of following 3 users on dev.islg. Hence, Please use following username for login to dev.islg. The password is remain same.
Are existing user passwords currently not encrypted in the database?
Thanks!
Ryan
Further to the video below, I did some initial testing of the new trial account request/activation process, and found the following issues that need to be resolved:
Morgan
We can not allow the duplicate email id in trail account request. we must require an unique email id while any user request for trial account
Because, If any user use the same email id for trail account request and then user clicks on Forget Username or Forget Password that time we can not identify the which email id we use to send the username or reset password link through mail.
Please suggest.
Ryan
The above all changes have been done on dev.islg. Please check and confirm.
I've run through the points above and confirmed all but the following:
Also,
Morgan
Above all suggested changes have been done except one change on dev.islg. Please check and confirm.
We are working on the change of Demonstration checkbox (point no. 4).
Following are the status of above mentioned tasks.
I've completed reviewing all the items concerning the to-do, and posted additional to-do's as necessary. The only outstanding items not addressed in other to-do's are the following:
Morgan
Following are the status of tasks.
Ryan
It looks like the only remaining items in this to-do (that aren't transferred to other to-do's) are the following:
Morgan
I have few questions regarding manual password reset flow.
Looking through the requirements on TargetProcess, I want to clarify a point. It appears we might be limiting the automatic password reset function to accounts assigned as Group Managers. However, I think we should make this an option available for all user accounts. This is important, because not all of our subscribers have an assigned Group Manager, but we may still need to setup automated password rests.
Also, in conjunction with this tool, we should create an ability for admin users to immediately reset passwords, which admin users may use in special circumstances (e.g., if they discover that login credentials have been distributed to unauthorized users).
Thanks,
Morgan
For admins reseting passwords, does their current password need to be immediately invalid or can we simply send them the user the password reset prompt email?
Yes, we can handle the settings internally as admin users, and we don't need to make this available to group managers.
Similar to front-end users, the current admin password should be immediately invalid if it has been manually reset by an admin administrator.
On the second point, I think we need to update the permissions for admin users. Currently we only have one level of Administrator Access, which gives access to anything within Global Admin & Reports. However, we should have an additional permission setting that only grants access to the Subscriber Managements pages: https://www.investorstatelawguide.com/Subscribers/. This will ensure only the admin administrators (i.e., me) have access to other admin pages within Global Admin & Reports.
Thanks,
Morgan
I've created a new story here for forced password resets: https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiRjE1MEJDRjZDNTUyMTJGNjRCN0JFRDQxQzc1QzMzNUUifQ==&boardPopup=userstory/4761
I updated this story to include all users, not just group managers:
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/4786758857233429686&appConfig=eyJhY2lkIjoiMzVBM0FCNTQwOTE1NTEwN0FGQUJDRTVEOTQ3MkY0QkUifQ==&boardPopup=userstory/4085/silent
Morgan
Morgan
Just confirming that we're working on getting these user stories
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/5697424370864230678&appConfig=eyJhY2lkIjoiRjE1MEJDRjZDNTUyMTJGNjRCN0JFRDQxQzc1QzMzNUUifQ==&boardPopup=userstory/4761
https://industrialagency.tpondemand.com/RestUI/Board.aspx#page=board/4786758857233429686&appConfig=eyJhY2lkIjoiMzVBM0FCNTQwOTE1NTEwN0FGQUJDRTVEOTQ3MkY0QkUifQ==&boardPopup=userstory/4085/silent
Thanks,
Morgan
We are working on it and will update you by end of tomorrow.
Are the user stories concerning forced password resets and automatic password resets complete? I noticed some changes on dev.islg. A couple of comments on issues I've noticed:
Morgan
Due to third point of above comment, we have to fundamentally change logic of expiration date and will take one or two day to complete this task.
We will update you soon.
We have understood
We are suggesting that if we will send expiration reminder mail for all 7 days to user then it will look good for them. Once user will reset the password then reminder mail will be automatically stopped.
Please suggest.
Just confirming the above. Only one email sent 7 days before password expires, and then second when password expires.
That's fine if this take a few days. I'd prefer to get this done properly.
Thanks,
Morgan
We have developed following story and uploaded on dev.islg. Please check and confirm.
Note : We have set reminder notification email time at midnight 12:00 AM and expired mail (after 7 days) 12:30 AM on dev.islg.
Ryan
Thanks,
Morgan
Thanks!
Ryan
Same here. On dev.islg, I setup two accounts to expire:
Thanks,
Morgan
We have tested above scenarios on dev.islg and received both following emails.
2. Password Expired email
Please check once again and let us know if you still don't get the notification email.
Yes
We have already uploaded above functionality on both dev.islg and www.islg.
Thank you for confirming the requirements on how the expiration date updates. However, further to the video below, I'm still not seeing the tool perform as required. Note that the accounts used in the video are the following:
Thanks,
Morgan
The reminder notification email (Before 7 Day) & password expired email notification (After 7 day) issue has resolved on dev.islg.
For testing purpose, Today we have manually run the service for Email notification on dev.islg. Hence, You are able to see the updated status and also Notification Email was sent to appropriate Email on dev.islg.
Please check and confirm.
Yesterday, We have manually run the service only for following two accounts on dev.islg
I got the email for http://dev.investorstatelawguide.com/subscribers/AddUser?id=2580&group=960&status=-1&city=0 and it appears that the account successfully changed to "Expired"; however, when I select the "Reset Password" link in the email, it directs me to the login page, rather than the reset password page: Reset my password. This should only occur after the password has reset, but that doesn't appear have happened since I never reset the password, and the account status is still on "Expired".
Thanks,
Morgan
We have checked above issue on dev.islg's database and found that the above account's signup date is blank in database. Hence, System could not find the account through last signup date to perform "Reset Password".
Could you please recheck the password expired functionality again with fresh email id on dev.islg?
We have found the number of subscribers account having blank
Signupdate and status is also active in www.islg's database.
We have made the list of those accounts in following excel sheet.
Please suggest.
The blank signup date is related to the issue reported here: No time stamp for user accounts created through Group Manager function - PENDING MIGRATION - TOLOGIX - ISLG Maintenance. To resolve the issue let's assign the date 1-Jan-01 to every account with a blank signup date.
Thanks,
Morgan
We have assigned 1-Jan-01 date to all the subscriber account who having blank signupdate on both dev.islg and www.islg.
I've run into an additional issue. Once an account has expired, the status on the account remains "Expired" until the password is reset by the users. However, there may be instances where the admin users needs to reactivate the account (e.g., the reset password email is lost by the user), and there doesn't seem to be a way to do this. I tried changing the status of the expired account to "Not active" and then back to "Active", expecting it to change the status to "Pending" as it issued a new activation email to the user, but that didn't happen. Switching from "Not active" to "Active" just switched the status back to "Expired", even if I changed to the expiration date to a future date.
See video below for more detail (no audio).
Thanks,
Morgan
We have resolved above issue on dev.islg. Now, If you will change status "Expired" to "Active" then activation mail send to user and status will be switched to "Pending".
Please check and confirm.
Ryan
Morgan
I ran my test on the same two accounts: http://dev.investorstatelawguide.com/subscribers/AddUser?id=2580&group=960&status=-1&city=0
http://dev.investorstatelawguide.com/subscribers/AddUser?id=1572&group=960&status=-1&city=0
The first was supposed to expire today and the other was set for a week from today. The first account's status changed to "Expired", but I didn't get any warning or password reset emails.
Thanks,
Morgan
Currently, We have setup two accounts for check the password reset emails issue on dev.islg. We will update you tomorrow.
Morgan
I haven't received an email for my account that was to expire today as well.
Ryan
We have received both notification mail (Before 7 day) & password expired mail (After 7 day) on dev.islg.
We have received both mail today morning between 9 to 10 AM. It mean the Email was fired at EST time (12 AM & 12:30 AM).
Also, Could you please test this scenario with fresh test account ?
I still have received any emails notifying a change in status to "Expired". Also, I've reactivated this account: http://dev.investorstatelawguide.com/subscribers/AddUser?id=2580&group=960&status=-1&city=0 and I haven't received the activation email, so it's stuck on pending status.
Morgan
I still have received any emails notifying a change in status to "Expired". Also, I've reactivated this account: http://dev.investorstatelawguide.com/subscribers/AddUser?id=2580&group=960&status=-1&city=0 and I haven't received the activation email, so it's stuck on pending status.
Morgan
I think there was a some problem with email. The mail exchange server may be not sending any email on "info@investorstatelawguide.com".
Could you please test whole scenario with your gmail id or anyone else ?
Recently, I have changed my status from "Expired" to "Pending" for email id "parikhharsh10@gmail.com" and I have received activation mail.
Have you received status changed notification mail ?
I'll run some tests on info@investorstatelawguide.com. I received a few status change and trial activation emails; however, still nothing concerning a status change to "Expired".
Morgan
I still have yet to receive an expiry email from dev.islg.
To confirm: As the user, if my account password is set to expire on June 19th, 2018, should I receive an email on June 19th, or June 20th?
For my test I've just set rknuth+0601@industrialagency.ca to expire on June 19th.
Ryan
I've added a fresh test as well: rknuth+0618@industrialagency.ca and set it to expire June 19, 2018.
One thing I noticed, though, is that when I created it as an administrator and set the expiry for June 19, 2018, then saved the new record, it reverted to the 6 month date of 12/19/2018 when I came back to edit the record. Setting it back to 06/19/2018 saved properly the second time.
Steps I took:
I have setup some fresh tests for tomorrow, for the Rain Fall and Snow Winter accounts on dev.islg. Note that I was getting odd results when doing some tests on these accounts earlier today. The automated emails (both activation emails and status change emails) were not working when I changed the status of the accounts back and forth between active and not active. However, the problem resolved itself after I changed the email address to my personal gmail address. The odd thing was that after changing the email address to my gmail address, and then reassigning it back to info@investorstatelawguide.com, the automated emails started to work again. I'm not sure why changing the email address would have that affect, but it happened fairly consistently on three different accounts (all under the Investor-State LawGuide (Season) group). I'm wondering if this has something to do with the fact that these are accounts created before the new subscriber management system was implemented, and I'm worried that the same issue might occur with other existing accounts. Could we look into this issue further, and ensure this will not be a problem with other existing accounts (i.e., accounts that are more than two months old).
Thanks,
Morgan
I've rescheduled another test, but please investigate further on why these emails are not getting sent.
Thanks,
Morgan
I got the expiration emails for both of my test users.
Ryan
http://dev.investorstatelawguide.com/subscribers/AddUser?id=2580&group=960&status=-1&city=0
http://dev.investorstatelawguide.com/subscribers/AddUser?id=1572&group=960&status=-1&city=0
Could we please get to the bottom of this and resolve the issue. There seems to be something that is interfering with sending automated emails to addresses with the investorstatelawguide.com domain. I've tested the email addresses numerous times, and there's nothing wrong with the emails, so it must be something on the application side.
Thanks,
Morgan
We have changed email id from subscriptions@investorstatelawguide.com to parikhharsh10@gmail.com for checking the automated status email on www.islg.
We have created few test accounts on www.islg and received all automated status notification email.
It may be there is a some issue with Carbon 60 mail server. Because we also haven't received any email on our devitpl.com domain.
Anil has dropped mail to Carbon 60 server's team for solution.
Carbon 60 and Mike at inline appear to have resolved the issue with the emails. I've setup some tests for accounts on dev.islg to expire tomorrow to test that component. However, test and monitor the system, and let me know if you discover any issues (i.e., automated emails are not sent/received as they should).
Thanks,
Morgan
We have tested the Email functionality on dev.islg and received all emails properly.
The emails appear to be working well now. However, further to the video below, the reset password links within the automated emails are not working properly. It's taking me to the login page, rather than the password reset page, and I'm unable to reactivate the account. The test was performed for the following account: http://dev.investorstatelawguide.com/subscribers/AddUser?id=2580&group=960&status=-1&city=0
Thanks,
Morgan
There was a bug which we have resolved and uploaded on dev.islg.
For testing purpose, We have reset both of your following account's status "Active" and set expiry date on 27th June.
Hence, Tomorrow (i.e 27th June) you will get the expired mail.
Morgan
The test was partially successful. The automated emails for the status change to "Expired" were received, as well as the password reset emails, which successfully allowed me to update the passwords and reactive the accounts. However, I never received a second status change emails indicating the status changed back to "Active" after the passwords were reset.
Thanks,
Morgan
We have resolved the automated mail issue after reset password and checked it on dev.islg.
Please check and confirm.
Morgan
The test was success! We finally have all the requirements complete. I'll schedule this to-do for migration to www.islg on Tuesday.
Thanks,
Morgan
We have migrated the changes of reset password links within the automated emails on www.islg.
Please check and confirm.
Ryan
Morgan
Morgan