Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-5129

Improve logging when attempting to authenticate using an expired account

    XMLWordPrintable

Details

    Description

      There are multiple suggestions related to the same issue - Remote apps connected to Crowd display an incorrect message when the user password has expired in a Crowd Internal Directory.

      Sorry, your username and password are incorrect - please try again.

      Since the credentials are expired, rather than incorrect, the application should inform it accordingly.

      Even in small organizations, end-users are usually not aware of all the possible systems that manage their accounts. Thus it is time-consuming for Sys Admins to receive requests from a user trying several times to use a valid password, and then figure out what's the real issue, which it's easily resolved once the user inputs their credentials in Crowd console:

      Please change your password, since your current password has expired

      Having a better message pointing out what to do, or automatically redirecting the login page to Crowd's "Change Expired Password" page would be a huge improvement.

      List of related requests:

      https://jira.atlassian.com/browse/JRASERVER-39656
      https://jira.atlassian.com/browse/JRASERVER-66444
      https://jira.atlassian.com/browse/CONFSERVER-28819
      https://jira.atlassian.com/browse/CONFSERVER-10455
      https://jira.atlassian.com/browse/CWD-1765
      https://jira.atlassian.com/browse/CWD-3323
      https://jira.atlassian.com/browse/CWD-5469

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-66444 Redirect to Crowd when a user have his password expired

          • Low - Low priority issues
          • Gathering Impact

          Suggestion - CWD-1765 Notify users by email when their passwords are about to expire and when they are already expired

          • Closed

          Suggestion - CWD-3323 Advise users of integrated applications about expired passwords

          • Closed

          Suggestion - CONFSERVER-10455 Implement the Crowd 'requiresPasswordChange' attribute upon login.

          • Gathering Interest

          Suggestion - CONFSERVER-28819 Redirect to Crowd when a user have his password expired

          • Gathering Interest

          Suggestion - CWD-5469 Password Expired Notification while login to Atlassian application

          • Gathering Interest

          Suggestion - JRASERVER-39656 Display a specific warning in login screen when user try to login using expired credential from Crowd.

          • Gathering Interest

          Activity

            People

              Unassigned Unassigned
              lmachado@atlassian.com Lucas Machado (Inactive)
              Votes:
              7 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated: