Login Page

From SmartWiki
Revision as of 09:40, 11 July 2019 by Mark Bridger (talk | contribs) (Login Screen Content - General)

Jump to: navigation, search

Overview

The Login page allows a user to gain access to your SmartSimple System. The user will authenticate on this page, typically by entering a username and password.

The login page is used to:

  1. Authenticate the user
  2. Switch languages
  3. Direct people to a signup page
  4. Ask the user to accept the use of cookies
  5. Enforce agreement of your systems privacy and security policies.
  6. Reset your password

This article will show you how to setup and modify login pages within your system.

Note: You will need global administrator access to setup or edit login pages. You will also need to create a separate login page for each language you want to support.

In the above example the login section and the language drop down that enables you to jump to the other language specific login pages are both highlighted.

Configuration - Essentials

Creating a New Login Page

1. Click on the 9-square menu icon on the top right of your page.

052919 MenuIcon.png

2. Under the heading Configuration, select Global Settings.

3. Click on the Branding tab.

4. Click on the hyperlink for Login Pages.

Finding login pages branding.png

5. The list of login pages available in your system will be displayed under the Primary tab; if there are none, the list will be empty.

List of login pages.png

6. Staying on the Primary tab, click the + icon on the top in order to make a new Login Page.

7. Modify the settings on the General tab and press Save.

New login page button.png

Login Screen Content - General

If you create a New Login Page or if you edit an existing login page, you will be redirected to the Login Screen Content  page where you can modify your page.

On the General tab you modify the settings on the left and then save to see the changes on the right side of the screen in the preview area.

Settings on left
Preview on right

The following settings are available on the General tab:

Setting Description
Language

Each login page must have a single language which you can select from the drop down. Available languages are: 

  • Arabic
  • Danish
  • Dutch
  • English - UK
  • English - US
  • Finnish
  • French - Canada
  • French - France
  • Georgian
  • German
  • Hindi
  • Italian
  • Japanese
  • Korean
  • Nepali
  • Portuguese
  • Russian
  • Spanish
  • Swedish
  • Traditional Chinese
  • Turkish
  • Vietnamese
Is Default Login Page By default, when a user goes to your system's URL, example https://smart.smartsimple.com they will be directed to the English US language login page. If you want users to go to a different language login page by default, toggle this setting on for the login page with your desired language. Note: only one login page can be set as the default.
Page Title Text entered here will display in a browsers title bar or a page’s tab. This text is used as the title tag of your web page.
Login Title Text entered here appears above the area where you authenticate. Generally it is not modified.
Content Title Text entered here appears above the custom message on the right area of the screen. Typically this is replaced with something like Welcome to ABC System.
Content Text Text entered here appears below the content title. Typically this area is used to describe who you are, what you do and what the system is used for. Example, ABC group provided grants to non-profits in small town USA. Press the register button to gain access to the system and apply for funding.
Logout Redirect URL Enter a URL such as https://www.smartsimple.com/ here and the user will be redirected to that site upon logout.
Link Section

Typically people are given the ability to self-register and gain access to your system. You have 3 options in this regard.

None – You provide no links to a signup page. Users cannot self-register and must be created and activated in your system via a different methodology, such as auto loading, importing or manual creation by internal staff.

Use Routing page – When you have multiple signup pages for different types of users, organizations and languages, this option is used. It will display a list of signup pages so the user can be directed to the signup page that is right for them. Learn more about routing pages

Custom URL – If you only have one signup page in one language you can choose this option and enter the URL to that page here. Remember to use the relative path. Example /s_signup.jsp?token=XVtQC1oGYFFaRhNaXxJaQVBRZEl8GnA%3D this way the register button will work on production and backup and any staging servers you may have.

Link Section Title Text entered here appears above the register buttons. Typically this is not modified.

Page Formatting

Scrolling down on the General Page will then bring you to Page Formatting options: 

Page formatting for login page.png 
Background Image

Upload a background image of your choice to appear as the background of your login page. You may select a file from your computer with the folder icon and upload it with the upwards arrow icon. You can delete any uploaded file with the trashcan icon. 

  • Note: The background image field will only allow you to look up and upload files once you have first clicked the Save button for your new login page.
  • Note: Currently our system only supports background images that are either in .jpg or .png format with a recommended resolution of 1920 x 1080 or higher. 
Background Position Select the position that you want your background image to appear in: Top, Vertical Center, Bottom, Left, Horizontal Center, Right. 
Background Color Select the color you would like your background to have. 
Background Opacity Select the level of opacity you want your background to have, with high opacity being a completely solid image or colour background and low being nearly transparent.
Panel Colour Select the color you would like to have surrounding the text area of your login page. This colour will be contrasted against the background colour if you choose one depending on the opacity. 
Panel Opacity Select the level of opacity you want your panel colour to have.
Font Colour Select the color of the font that will be included in the login page. This will effect all fonts on the page, including the Content Title, Content Text, Link Section Title, and so on.

Routing Page

You can also learn about the Routing Page here. 

Routing page.png 

The configuration options for your routing page include the following:

Button Label The label that will appear on the button on the login page that, when clicked, will direct the user to this Routing Page.
Header Title The header that will appear on the Routing Page.
Introduction Text The introduction text that will appear on the Routing Page.
Trailing Text The text that will appear at the bottom of the Routing Page.
Routing Links

This is a dynamic section that allows for the creation of multiple links on a Routing Page. In order to add a new link, simply click the button. 

  • Title: The title that will appear for the configured link.
  • Description: The description that appears against the configured link. 
  • URL: The URL that the user will be taken to upon clicking on the link. 

The routing page configuration section is intended for those instances that have the following: 

  • Multiple signup pages to register different kinds of organizations and users
  • Multiple signup pages for different languages
  • Multiple eligibility questionnaires for different locations

A routing page will allow for simplified creation and access to multiple pages, guiding the end-user to the correct page from a single login page. A successful routing page might look like the following: 

RoutingPage.png

Template

The third tab from the Login Screen Content is the Template page. Here, you can use the Sample Template button to populate the content of the Rich Editor field, and then modify as necessary. 

Login page template.png

ReCAPTCHA Security

Login pages will automatically enable Google reCAPTCHA functionality in order to ensure security standards. In order to modify or disable this setting, go to Global Settings > Security and scroll down to the bottom of the page. 

Recaptcha.png 

Configuration - Advanced

Error Message

In order to display an Error Message when an incorrect login username or password is provided, simply include the following variable into the Login Screen HTML: @errmsg@

The system will always save a list of all invalid logins. See how to access this list here.

Popup Blocker Check

The login page can be configured to check whether users have a pop-up blocker enabled; it will enable a suggestion to the user that they disable their pop-up blocker for the SmartSimple system. 

The source code of the login page will include a code for a pop-up blocker warning message, but by default this will be disabled.

PBWarning1.png To enable the warning message, simply remove the text disabled="disabled" from the source code, then click Save at the bottom.

PBWarning2.png Any users that are using a browser with a pop-up blocker enabled will consequently see the following alert message on their screen when they access the login page: 

PBWarning3.png

JavaScript

The following JavaScript can be added to the login page for further customization. 

Forgot Password

HTML: Forgot your password? Please click .
JavaScript: 
function passwdwin(){

window.open('/s_requestpassword.jsp', 'pwdwin',

'left=200,top=200,toolbar=0,width=300,height=214,directories=no,status=no,

scrollbars=no,resizable=no,menubar=no,alwaysRaised=yes');

}

The system-generated email sent to the user after selecting the Forgot Password option can be configured from Email Templates for User Activation and Password

Branch-Specific Forgot Password

This functionality can be used when a user exists in the system multiple times with the same email address, but against different branches (organizations). The configuration means that only the password for the user account under a specific branch will be updated.

HTML: Forgot your password? Please click . 
JavaScript: 
function passwdwin(branch) { 

window.open('/s_requestpassword.jsp?branchid='+branch,'pwdin','left=200,top=200,toolbar=0,width=300,height=214,directories=no,

status=no,scrollbars=no,resizable=no,menubar=no,alwaysRaised=yes');

} 

A login page can be configured with multiple Forgot Password links, each including a different companyid as the parameter. Alternatively, you can create multiple login pages with a single link/companyid included on each page. 

When the user clicks on the Forgot Password link, enters their password, and submits it, then the underlying code will search for the entered email address in the company and all of its sub-organizations. It will then email the password for that branch-specific user account.

  • The email sent can then be configured with Sslogic to tailor the content of the email to the specific branch.
  • The error message displayed on this page when an invalid email is entered can be altered using the Language Library.

Alternate Login Pages

The Alternate tab from the Login Page list view is used to view and create multiple custom login pages for various groups of users within the same system. It uses virtual alias to mask their instance URL

When you click the icon at the top of the Alternate tab to create a New Alternate Login Page, you will be brought to the following form: 

Alternate login pages.png
Login Page Name Name of the virtual alias login page
Description Description of the virtual alias login page
Scope Organization Lookup that allows the virtual alias login page to be restricted to users in the selected organization
Virtual Folder Name User adds a name such as "grants," and then you can direct different users to appropriate logins
Web Alias User enters the alias they want - for example, "gms" - instead of the instance-defined alias
Persistent Cookies Enable or disable persistent cookies. Rather than having to log into SmartSimple each time you open your web browser, a "cookie" can be installed on your computer that will automatically authenticate you, allowing you to bypass the login screen and having to re-enter your credentials. 
Attach User Identifier
Encrypt URL Enable or disable the encryption of the URL
Redirect URL Enter URL for users to be redirected to upon successful login
Primary Role Select from the available system roles to choose the primary default role that a user will have when they log in from this alternate login page. This function is used to force the user to see the correct portal.
Login Type

Select from the drop-down for the three available options: All Users, Activated Users Only, No Access 

User Field This is the field that will be used on the login page to uniquely identify the specific user when they log in. This is typically set to Email Address. 
Password Field This is the field on the login page that will be used to capture the user password when they login.
Login Error Message This is the error message that will appear on the login page after a failed login attempt. 
Login Page Content Insert Sample Template - Click this hyperlink to autopopulate the text window with a sample template for a login page. Otherwise, you can insert in your own customized content. You can use the HTML Editor button at the bottom in order to open a pop-up that displays the content as it will be shown to the user from the HTML. 

Login Security Features

Login security is related to the System Security section of your SmartSimple copy. In order to disable or enable certain security measures relating to the process of logging in and out of SmartSimple, follow these steps: 

1. Click on the 9-square menu icon on the top right of your page.

052919 MenuIcon.png 

2. Under the heading Configuration, select Global Settings.

3. Click on the tab called Security.

4. Scroll down until you see the subheading System Security. 

Many system security features will be listed, with a certain few pertaining to login and logout activity for users. These are outlined in red in the screenshot below, and each explained in greater detail in the subsections. 

Login security.png

For more information regarding aspects of system security not just related to logging in and out, please see our Security Settings page.

Enable Logout

Enabling this function will terminate the session and automatically log out the user when they navigate to a different website, close the browser, or click Logout. 

Disable External Login Shortcut

This function will disable the use of external login shortcut from the URL. Because there are security implications to using the external login shortcut (see below), disabling the feature completely is a good preventative measure.

What is the External Login Shortcut?

This function allows you to bypass Login Page Scripting that you have added to the Login Page. However, this technique should only be used when it is completely necessary because there are numerous security implications: 

  • The URL being opened may be available to other users on the same machine on which you are browsing
  • The URL retrieved from the remote machine may be logged elsewhere (i.e. Proxy Server history, DNS server) 
  • Your browser history may retain the URL, including your password

The conditions for when you should use this technique include: 

  • When the Login Page Scripting is not functioning correctly
  • When you clone a copy of SmartSimple and the original copy contain a Login Script that prevents you from accessing the clone 
 Never create this technique as a browser shortcut because the username and the password are exposed. 

 To employ this method of accessing your SmartSimple instance, you use the following type of URL: 

http://Alias.smartsimple.biz/exlogin.jsp?alias=alias&user=username&password=password
  • exlogin.jsp is case-sensitive

Disable Session Timeout Alert

This function will disable both a 30-second alert and a re-login prompt for a Session Timeout (if Session Timeout is set).

In order to set Session Timeout, simply scroll up above to the heading Business Security. The last field box in that section will allow you to set x amount of minutes of inactivity before the user's session will automatically initiate Session Timeout. 

Session timeout setting.png

Disable Login Token Check

By disabling this feature, you allow the same user to be logged in from multiple sessions. This is a function primarily used only for load-testing purposes. It is strongly recommended that this feature is not set when going live. 

Invalid Login Audit

In order to access a list of all invalid logins from your SmartSimple instance, follow these steps: 

1. Click on the 9-square menu icon on the top right of your page.

052919 MenuIcon.png 

2. Under the heading Configuration, select Global Settings.

3. Click on the tab called Security.

4. Click on the hyperlink called Password and Activation Policies.

5. Click on the fourth tab labelled Invalid Login Audit.

The list of invalid logins will be displayed: 

Invalid login audit.png

The fields for invalid logins include IP Address, User Name (denoted as an email address), and the Time of the invalid login.

Using the Search fields on the top right, you are also able to apply Filters by time period (Year and Month) and/or by username. 

See Also