Smartstaff
2,091
edits
Changes
m
In the upcoming November 2023 release, password variables will be deprecated for improved security. All systems will be required to use the activation link variable (<code>@activationlink@</code>) to send the user to a page where they can enter their desired password instead of using the soon to be deprecated password variable (<code>@password@</code>) which sends a password in email. Therefore, the following variables will be deprecated and will not work after the November upgrade: <code>@password@</code>, <code>@checkportalpassword@</code>, <code>@checkactivatedpassword@</code>, <code>@randompassword@</code>, and <code>@passwordresetlink@</code>.
If you need help updating email templates for new users or password resets, reach out to our Support team. These email templates are located at '''Menu Icon''' > '''Global Settings''' > '''Security''' tab >''' Password and Activation Policies''' > '''Activation Emails''' tab. Clicking the '''Sample Template''' link will update the templates with the desired variable. Make sure to check any existing workflow emails for these soon-to-be deprecated variables.
Depending on how your user signup pages are configured, you may also need to update signup page templates for new users which can be found at '''Menu Icon''' > '''Global Settings''' > '''Communications''' >''' System Email Templates'''. You can filter the list by searching for “Signup”.
==See Also==
Please read our [[Password Policy]] for more comprehensive information about user passwords.
[[Variables]] can In the upcoming November 2023 release, the use of password variables will be used within [[SmartSimple]] deprecated to enhance security measures and align with best practices. Instead of using the soon to automatically generate system [[be deprecated password variable <code>@password@</code> which sends a password]]sin plain text in the email body, all systems will be required to adopt the following activation link variable.This variable will redirect users to a designated page where they can securely set their desired password:
==New Users=={{Deprecated}}Therefore, the following variables will be deprecated and will not work after the November upgrade:
To generate * <code>@password@</code> - Generates a new [[Password|password]] for new users* <code>@randompassword@</code> - Generates a random password for existing users* <code>@passwordresetlink@</code> - A link that allows existing users to reset their passwords* <code>@checkactivatedpassword@</code> - Checks if a user is activated. If sent to a user who is not activated, it generates a '''new''' [[User|password. If the user is activated, it will send the words “existing password”.* <code>@checkportalpassword@</code> - If sent to a new user, it will generate a new password. If sent to an existing user, it will send the words “existing password” and promote the user to an admin/portal type user]].
: <span style="font-size: medium;">'''@If you need help updating email templates for new users or password@'''</span>This can be used in:resets, reach out to our Support team.
* Any [[Sign-Up Page|Signup page]] message body.* Any [[Applicant Tracking]] System applicant profile message body.==Areas for Review==* [[Global Settings]] There may be references to the soon- [[User Email Templates|user email messages]] to- New [[User]] message and Forgot Password messagebe deprecated variables within multiple areas of your system.* Any [[Workflow]] - [[Workflow Task Type: Acknowledgement|Acknowledgment task type]]These will need to be changed prior to the upgrade.
==Existing Users==* Navigate to '''Menu Icon > Global Settings > Communications > System Email Templates'''.To generate a new [[Password|password]] * Click the '''Export Emails''' button top left above the list. This will export the list of system emails as an excel file.* Search the column called '''Email Body''' for an all deprecated variables contained within system emails. If you find anything that needs to be updated, go back into the system and update the relevant email by clicking on the '''existingEdit System Email''' [[User|user]]button (pencil icon) next to the relevant system email template.
: <span style="font-size: medium;">'''@randompassword@'''</span>This can be used in:If you need help, contact our Support team.
* Any [[Sign-Up Page|Signup page]] message body.* Any [[Applicant Tracking]] System applicant profile message body.* [[Global Settings]] - [[User Email Templates|user See below for more information regarding changing system email messages]] - New [[User]] message and Forgot Password message.* [[Email Broadcast]] - to generate a new random [[Password|password]].* Any [[Workflow]] - [[Workflow Task Type: Acknowledgement|Acknowledgment task type]]templates.
In the ===User Signup Pages===Depending on how your user signup pages are configured, you may need to update signup page templates for new users. You may alternately access these templates by navigating to '''Menu Icon''' > '''Global Settings''' > '''Users''' > '''Signup Pages'Request Password'' section of [[User Email Templates]], the following variables can be used to create a time-delimited link for password.
: <span style===Workflow and System Email Templates===Password variables can also be found in workflow emails, such as "font-size: medium;User">'''<nowiki>http://@url@@activationlink@</nowiki>'''</span>See [[Password Policy]] for further detailstype workflows where a workflow is used to activate and send an activation email to a user.
: <span style="font-size: medium;">'''@checkactivatedpassword@'''</span>
To generate a new [[Password|password]] for a new user or sends the words ''"existing password"'' for existing users '''AND''' to promote user to admin/portal type user.
: <span style="font-size: medium;">'''@checkportalpassword@'''</span>
These can be used in:
* Any [[Sign-Up Page|Signup page]] message body.
* Any [[Applicant Tracking]] System applicant profile message body.
* [[Global Settings]] - [[User Email Templates|user email messages]] - New [[User]] message and Forgot Password message.
* Any [[Workflow]] - [[Workflow Task Type: Acknowledgement|Acknowledgment task type]].
==Notes==
===Translation===
Because of the complex nature of the password creation and validation process it is not possible to automatically translate '''existing password''' into other languages. If you are sending an e-mail containing the @checkactivatedpassword@ variable you can use the following syntax to display text other than "existing password" if required.
For example, for an existing user the following will show the French translation of '''existing password''' which is '''Mot de passe courant'''. If the user has not been previously activated the syntax will provide a randomly generated password as normal:
<pre>
<!--@sscalculation(if(trim("@checkactivatedpassword@")="existing password","Mot de passe courant","@checkactivatedpassword@"))-->
</pre>
===Processing Time===
System-generated emails that contain passwords bypass the typical [[What Is Gort?|Service Process Manager]] and, hence, are sent out immediately rather than being put in an email queue.
==See Also==
* [[UTA Workflows and the Password Variables]]
* [[User Email Templates]]
→Workflow and System Email Templates
==Overview==
<pre>https://@url@@activationlink@</pre>
[[File:activation-variable-link.png|thumb|none|800px|An example of the activation link variable when used with a new user email.]]
An easy way to see and check the content of all system emails for deprecated variables is to:
===Password and Activation Policies===
Clicking the '''Sample Template''' link will replace the existing email template, with a sample template from SmartSimple which contains the new activation link variable. You may then modify the template as needed. You may alternately access this template by going to '''Menu Icon''' > '''Global Settings''' > '''Security''' tab >''' Password and Activation Policies''' > '''Activation Emails''' tab.
==New or Existing UsersSee Also==To generate a new * [[PasswordPolicy]]* [[Signup Page]]* [[:Category:Email|passwordCategory:Email]] for a new user or sends the words ''"existing password"'' for existing users (see '''Notes''' below)
[[Category:Authentication]][[Category:VariablesDeprecated]]
