If selected, users will be allowed to select this option from the login page. Selecting keep me logged in will override the standard 20 minute timeout for inactive sessions and keep the user logged in.
For users with Named user licenses (i.e. dedicated to the user) it means their sessions will not timeout and if they just close their browser without logging out, when they access the application again, they will by-pass the login page.
For users with Floating user licenses (i.e. shared licenses), this option will attempt to keep the user logged in. However, a user may lose their license spot if another floating license user tries to logon and the ‘keep me logged in’ user has been idle for longer than the session time out parameter.
WARNING: Allowing ‘Keep me logged in’ can weaken the security of the application as work stations left logged in and unattended could be used by unauthorized people to access the application.
If Allow ‘Forgot password’ is selected, users will see an option on the login page for: Trouble logging on? Forgot your password? Clicking on the link provided will initiate the password recovery option selected:
Secret question and answer
– users will be prompted for their user ID. If a valid user ID is entered the user will then be prompted with a secret question and allowed to enter an answer. If correctly answered, the user will be taken to the password reset page. The secret questions and answers are set by the user from the User Profile page (click on user ID at the far left of the main menu bar). You can choose to allow the user to create their own secret question or force them to pick from a set of predefined questions.
Send a password reset e-mail
– users will be prompted for their e-mail address and if RMTrack finds a user account with a matching e-mail address, an e-mail will be sent to that address. The e-mail sent will use the e-mail template selected here. The e-mail template must contain the macro [PasswordResetUrl] which will allow RMTrack to send a link to the user that will take them to the password rest page.
Password Strength
RMTrack can enforce certain password strength criteria by forcing users to set passwords that meet the rules selected.