End User Passwords

 

---

How End Users Retrieve a Forgotten Password

SAM does not save passwords, so when end users need to reset their password, they must follow prompts to reset or create a password.

Most record types will request the last name only, but a form based off an Organization will request the Organization's name. The Name must match exactly for SAM to work properly. 

If the email address/name combination do not match, SAM will notify the end user on the form. End users will need to contact your organization to recover an email address and name if they are unable to enter the correct combination. 

4. The link will request the user input a new password and confirm the password. Click save when complete. At this time, the user can access the original form link and login with new credentials. 



 

---

 

Public Form Login Messaging 

Provide an explanation to the user about collecting the password, such as: 

 

When a password reset is requested from a Public Form, SAM will email the user instructions. This messaging can be modified from the Public Forms Links screen. 

To modify the message: 
1. Click Settings > Public Forms Links. 
2. Click Advanced Options, then select an option below to change the text the Public Form user will receive. 

 

The messaging shown to a form user at the Login screen can be modified. 

1. Open Form Customizer > Advanced Options > Really Advanced Options > Advanced Form Properties
2. Find the Login - Public Forms section
3. Enter the "Login/Prefill Option Section Text/Question" with a new message. Click Save. 

 

Public Forms & Auto-Matching

By default, all Public Forms have Auto-Matching disabled because it makes Public Forms less secure. The security risk is hackers trying Last Name and Email combinations to match with existing records. 

When a duplicate email address is suspected, SAM will prompt the end user to login by opening a popup. The end user can set or reset their password using the "Forgot or Don't have Password" link, which will send an email with a special link. If the end user chooses to ignore this login prompt, a new, potentially duplicate record will be created.

For each form, Admins can disable the login prompt: 

1. Advanced Options > Really Advanced Options >Form Security Settings
2. Set Public Forms | Prompt user to login when duplicate email = No This will create duplicate records if the "Public Form | Auto-Match" Form Property is also set to "No" (which is the default). We don't recommend changing this because security is more important than convenience.

Public-Form Auto-Match Record Criteria

When you enable "Public Form | Auto-Match", SAM will still use the "Public-Form Auto-Match Record Criteria", which is set per each Main Entity Table, to know if an auto-match should occur. By default, the Criteria is "Login Password" is Empty.

To set the "Public-Form Auto-Match Record Criteria"​ go to the Table Properties for a Main Entity Table > Advanced Options > "Public-Form Auto-Match Record Criteria"​ If you want all records to Auto-Match regardless of any criteria, then just delete all the filters in the "Public-Form Auto-Match Record Criteria"​

If there are Duplicate Records, SAM will login (or reset the password) to the latest one.

Public Form | Auto-Match

When "Public Form | Auto-Match" is enabled, records entered through the public forms are automatically matched to existing records by:

1. Last Name + Email Address
2. Last Name + Phone Number
3. Email Address + Phone Number

When a new Public Form is submitted and SAM matches at least two of the criteria, the information captured on the public form will be entered for the matched record. When these criteria are not matched, a new record will be created.