Advanced Login

Reset User’s Password

• From within the Administration interface, select User Management and then User from the Navigation Menu.
• Select the user whose password you need to reset, and click Reset Password. The password will be set to a blank password, which the user must then reset on his or her next login.

Remember Me

• Under Properties -> Front End, uncheck Enable Remember Me to force users to enter their password every time.
• When enabled, users will have the option to remember their password for up to the number of days specified under Remember Me Age.

One Time Passwords (OTP)

One time passwords are an additional security method. The login process is in 2 stages. First, a user logs in with a username and password. Next, PaperTrail sends an SMS message that contains a PIN to the user’s mobile phone. The user enters the PIN to complete the login operation.

One time passwords are a global. If a user does not have a mobile phone, then that user cannot log in with username and a password. However, the user can access PaperTrail with other SSO methods.

• Make sure that SMS Notifications are configured.
• From Services > Properties > One Time Password, select Require OTP SMS.

To setup NULL OTP provide (accepts any value as valid), add the below property and restart PaperTrail authentication.otp.provider=com.egis.security.NullOtpProvider

Automatic User Creation

Users can be automatically created by checking Properties --> LDAP --> Auto Create Users, this requires that LDAP be configured and working. Users who try and login with a valid LDAP login and password will be created automatically.

Non LDAP based authentication can also be used by specifying Properties --> Authenitcation --> Authentication Data Provider which will accept either a fully qualified classname that implements com.egis.security.UserCreator or a datasource via ds:{DataSourceName} the datasource can either return an un-persisted User object or a Map of user fields including login, name, password, email, etc..