Users
New Users
New users can be added to BusinessPlus either directly in NU Manage Users or by using the Create New User IDs (NUUTNU) utility. The utility references common codes NUFG/NU945C and, depending on setup, NUSC/NWUSEREO (Employee Online), NUSC/NWUSERTO (Timecard Online), and NUSC/NWUSERET (Employee Online/Timecard Online).
Users must be given an initial password with which to log on (SSN or employee ID). An organization will have to determine how to generate these initial passwords and communicate them to the employees.
User Security
The NU Manage Users plugin in the Administrative Console can be used to set individual security settings. The Main tab lists general items such as password expiration and subsystem security code settings. The Security tab is used to assign security roles. A role is assigned by checking the box next to a security role.
After assigning one or more roles to a user, launch the Rebuild Security tool from the plugin. This will put a request into the Workflow queue to rebuild security for the selected user so that the information needed by the software to implement their security is generated. Until the user's security has been rebuilt, the changes will not fully take effect.
NU Manage Users can also be used to locate a list of users assigned to a role by putting the screen into Find mode, checking a specific security role on the Security tab, and then applying the Find criteria. The list of users returned will all be users with that role assignment.
Assign Security Roles
While the NU Manage Users plugin is useful for setting up one user at a time, it is not quite as effective when setting up a new role that needs to be applied to multiple users at the same time. In that situation, use the Assign Security Roles plugin to assign multiple users to a role at once. Use the Rebuild Security tool on the plugin to rebuild security for users impacted by that role security assignment. The plugin can also be used to quickly determine which users have access to a particular security role without the need for a separate report.
Login
New users log in to BusinessPlus with their assigned password. If the status of their NU user record is set to P the user is forced to change their password when first logging in. When LDAP is enabled, see User Authentication for information on authentication rules as they apply to LDAP and BusinessPlus users.
Forgot Login/Reset Password
The Login Settings tab within the Customize Dashboard page (<servername>/IFAS7/Home/Customize) is used to control which portals allow the Forgot Login feature. Each portal can be selected individually. The setting controls whether the Forgot Login link appears on the portal login page.
A Workflow model controls which associations allow the user's password to be changed and emailed. This model can be found on the install DVD under /WFModels/Nucleus/FORGOTLOGIN.wdl. If a client has been previously using this functionality for Applicant Online, they will need to load this new Workflow model for that functionality to continue to work.
The 7i/Finance Login option applies to the main BusinessPlus login page and the dashboard. Timecard Online and Employee Online are both combined into one setting.
When enabled, after selecting the Forgot Login link on the login page, the user is redirected to a page that allows them to fill in their email address. The email address is used to perform a reverse lookup to obtain their login and password. A valid email address in the E-Mail Address field on the NU Manage Users screen is required for this functionality to work correctly. If the email address is used for multiple logins then all of the logins will be submitted to the FORGOTLOGIN model. The users login password will be reset if the login data meets the FORGOTLOGIN model conditions to reset a user password.
After successful validation, an email is sent to the user. When using the default FORGOTLOGIN Workflow model, a standard format is used to generate the email body. A new random password will be generated and emailed to the user. If the client prefers not to reset the password, they may update the Workflow model to just email the password instead of resetting it. They can also force the user to change their password at their next login by setting the Status to P on the USUsnoMaster record from the Change Password VBScript in the Workflow model.
Password Complexity
In BusinessPlus build 7.10 and up, password requirements are controlled in the Administrative Console, 7i Server Administration, Setup, Miscellaneous Settings tab. Note that these settings are not applicable to Active Directory (LDAP).