Operations Settings - Enable Automatic Reset Password Email after Failed Login Attempts

1. Navigate to "System"

   When a customer has many failed login attempts, they will receive a "Login failed" message on the login screen. You can now configure your settings so that after they receive the failed message, they’ll get an email letting them know that the system detected many failed login attempts and, as a result, their account has been locked. Within that same email, they have the option to easily reset their password. To further customize this experience, you can set the required number of failed login attempts before the email is sent, as well as the number of minutes a customer would be locked out of their account. To set these settings up, first, navigate to the "System" section in the Operations Portal.

   

2. Click "Settings"

   Then, click "Settings". In order to access and edit settings, you will need to be set up either as an "administrator" or a "superuser", or have the following roles: "settingEdit" and "settingView".

   

3. Search for the setting "customerAlertWhenAccountIsLockedOut"

   Enter "customerAlertWhenAccountIsLockedOut' in the "Search..." field.

   

4. Click the more details icon

   Click its more details icon.

   

5. Enter "1" in the value field

   Enter "1" in the value field. This will enable the email automation to send when an account is locked.

   

6. Click "Save"

   Click the "Save" button to apply the changes made to the setting.

   

7. Search for the setting "customerNumberFailedLoginsBeforeLockingOut".

   Go back to the settings screen and search for the setting "customerNumberFailedLoginsBeforeLockingOut".

   

8. Click the more details icon

   Click its more details icon.

   

9. Set the desired number of failed logins in the "Value" field

   Set the desired number of failed logins in the "Value" field. This is the number of times a customer (or hacker) can try to log in with the incorrect information before having their account locked out of the system. If you wish to turn off the lockout, set the number to zero.

   

10. Click "Save"

    Click the "Save" button to apply the changes made to the setting.

    

11. Search for the setting "customerLockoutDurationInMinutes"

    Go back again to the "Settings" screen. This will be the last setting that you need to set up. Search for the setting "customerLockoutDurationInMinutes".

    

12. Click the more details icon.

    Click its more details icon.

    

13. Enter the value for lockout duration

    Enter the value for lockout duration. This is the time in minutes that a customer account will be locked out after reaching the max number of failed login attempts and triggering the lockout.

    

14. Click "Save"

    Click the "Save" button to apply the changes made to the setting.