We should add a flag to patron accounts that, if checked, would require the patron to sign in to their account and change their password. This option could incorporate the following functionality: * Allow patron to sign in with old password then prompt for a new password. * E-mail patron notifying them with the need to change. * When active, it would block checkouts and sip authentication until done. * Anytime a password is changed in the account, whether staff side or opac, the change would clear the flag in the patron account. * Date of change should be time stamped. Christopher
I really like the idea of having a way to enforce password change. It would also be nice if the flag could be preset for new patrons in general and/or from the patron import tool.
Sure, it's a must have...
(In reply to Christopher Brannon from comment #0) > * E-mail patron notifying them with the need to change. I think this feature is sorely needed, but I think many users would think this kind of email was a phishing attempt.
I would add that I want all new patrons to have this flag set by default if a login is created.
(In reply to Liz Rea from comment #4) > I would add that I want all new patrons to have this flag set by default if > a login is created. +1
(In reply to Katrin Fischer from comment #1) > I really like the idea of having a way to enforce password change. > > It would also be nice if the flag could be preset for new patrons in general > and/or from the patron import tool. +1
We should add a flag to patron accounts that, if checked, would require the patron to sign in to their account and change their password. This option could incorporate the following functionality: * Allow patron to sign in with old password then prompt for a new password. * E-mail patron notifying them with the need to change. * When active, it would block checkouts and sip authentication until done. * Anytime a password is changed in the account, whether staff side or opac, the change would clear the flag in the patron account. * Date of change should be time stamped. * All new patrons shgould have this flag set by default if a login is created.
We should add a flag to patron accounts that, if checked, would require the patron to sign in to their account and change their password. This option could incorporate the following functionality: * Allow patron to sign in with old password then prompt for a new password. * E-mail patron notifying them with the need to change. * When active, it would block checkouts and sip authentication until done. * Anytime a password is changed in the account, whether staff side or opac, the change would clear the flag in the patron account. * Date of change should be time stamped. * All new patrons should have this flag set by default if a login is created.
*** Bug 24795 has been marked as a duplicate of this bug. ***
Noting that Koha now has the capability to send a reset notice. However, this is limiting to patrons that have email. Even if the notice were to send via text, this still limits capability to certain patrons. It would be preferable if the reset tied into the same mechanism that password expiration uses. Right now, they work independently from one another and the reset is exclusive to patrons that receive email.