Web User Security Management

Transcription

1 Web User Security Management... 1 Introduction... 1 New User Sign Up... 2 Step 1: Click the Not Registered? link on the Authorized Sign In page... 2 Step 2: Choose New User Sign Up & fill out request form... 2 Step 3: User validates the request Step 4: Processing New User Sign Up request... 4 Step 5a: When user is denied... 4 Step 5b: When user is approved... 4 Forgot Password... 4 Step 1: Click the Forgot Password link on the Authorized Sign In page Step 2: Choose Forgot Password & fill out request form Step 3: User validation... 5 Reset Existing User... 6 Step 1: Click the Not Registered link on the Authorized Sign In page Step 2: Choose Reset Existing User & fill out request form... 6 Step 3-5: These steps are the exact same as the new user sign up... 7 Disable User by Super Users... 7 Step 1: Sign in to the website at the Authorized Sign In page... 7 Step 2: Go to My Profile page... 7 Step 3: Click on the Request Access link at the top of the page... 8 Step 4: Choose Disable User & fill out request form Step 5: Processing Disable User request... 9 Web User Security Management Introduction As part of our system upgrade, we have a new process for managing access to our E-Business portal. The reasons for this enhancement are: a.) Automate and speed up user sign up process b.) Provide our customers with the ability to manage their own employees access to our web sites This change will affect our customers in following ways: a.) No phone call or fax is needed to sign up new users All user security management to Advance and Kent sites can be done on the web. b.) For new user(s), address can not be shared Each new user must have a unique address that has not already been used by other user. This is to help improve our overall system security and communication with our users. One way to work around this limitation is to make use of aliases which is a common feature in all modern systems. c.) Introducing the concept of Super User Super User is an individual who has the ability to perform approval for: i) New User Sign Up ii) Forgot Password (if applicable)

2 iii) Reset Existing User iv) Disable User There are two groups of super users: a.) Nilfisk-Advance customer service reps; b.) Managers or their delegates in your company with administrative/approval right. It is customer s responsibility to manage which user should or should not be a super user. New User Sign Up Here is how to sign up for online access: Step 1: Click the Not Registered? link on the Authorized Sign In page. Step 2: Choose New User Sign Up & fill out request form. Fill out form with required fields noted with an * Address is as an identifier in the system and must be unique from other users. If you wish to have the ability to approve/deny other requests for your account select the Designate as Super User checkbox. (Please click more info for a detailed description)

3 Step 3: User validates the request. Requesting user is sent an to validate the request. The user must click on the link in the which will bring the user to a page showing their request.

4 Step 4: Processing New User Sign Up request The first is sent out to the requesting user notifying them of the super user(s) that will be approving/denying the request. The second is the approval/deny that is sent to the super user for approval. Step 5a: When user is denied If super user denies the request an is sent to the requesting user letting them know their request was denied. Step 5b: When user is approved If super user approves the request an is sent to the requesting user with instructions on how to setup their password and login. Forgot Password Here is how to request a new password:

5 Step 1: Click the Forgot Password link on the Authorized Sign In page. Step 2: Choose Forgot Password & fill out request form. Fill out form with required fields noted with an * User Name must exist in the system. Step 3: User validation If system doesn t have valid for user (example. NotSetup@domain.com) then the typed in the form will be used to send change password link and the request must be approved by a super user (Step 3a). Users with a valid address will immediately get change password link without approval (Step 3b).

6 Step 3a: When user is without valid address: When user s address is not valid, then request must be approved. Two s are sent out. The first is sent out to the requesting user notifying them of the super user(s) will be approving/denying the request. The second is the approval/deny that is sent to the super user. Step 3b: Choose new password and login When reset request is successfully processed, user gets Change Password with instructions on how to complete password reset. Reset Existing User Here is how to reset security access and/or profile information for an existing user: Step 1: Click the Not Registered link on the Authorized Sign In page. Step 2: Choose Reset Existing User & fill out request form Fill out form with required fields noted with an * User Name must exist in the system. User has the option to use existing account and profile information o If the system detects issues with existing user information the user will be required to fill out the full form.

7 Step 3-5: These steps are the exact same as the new user sign up. Disable User by Super Users Here is how to disable a user which prevents the user from logging in: * To disable a user you must be a Super User and be signed into the website before the option will become available. Step 1: Sign in to the website at the Authorized Sign In page. Step 2: Go to My Profile page From the My Account Page click on the my account > dropdown menu at the top of the screen and select View My Profile.

8 Step 3: Click on the Request Access link at the top of the page. Step 4: Choose Disable User & fill out request form. User logged in must be a super user to see this option. Customer information will be automatically populated by the system if valid. The logged in user will type in the User Name that should be disabled. User Name must exist in the system.

9 Step 5: Processing Disable User request Two s are sent out. The first is sent out to the requesting user notifying them of the super user(s) that will be approving/denying the request. The second is the approval/deny that is sent to the super user for approval. Step 5a: If super user denies the request an is sent to the requesting user letting them know their request was denied. Step 5b: If super user approves the request the user typed in the User Name box will be removed from the system.