Password has Expired

Now with Universal User management it is possible for a

users password to change and in some

cases its required to change every x number of days. This feature will outline how Mobile will handle
the password change.
Password has expired on the server:
When the user authenticates with the server the password expired flag should be sent to mobile.
When mobile directs this it will display the password reset screen so that the user can create a new
password. If the password does not meet the minimum requirements a message will be displayed at
the top of the screen. The users current password will automatically be sent to the server and the user
will not need to supply this. The user will need to enter a new password and confirm the password.
Multiple Accounts:
If the app is configured with More than 1 account then a link will display at the bottom of the Expired
password page. This will allow the user to with to another account if it is not their account that need to
create a new password. When the user switches back to the expired account they must create a new
PW in order to continue using the app.
Password requirements will need to match what NCP enforces.

Password validation rules on mobile side :

1.
2.
3.
4.

Password
Password
Password
Password

should
should
should
should

contain
contain
contain
contain

at
at
at
at

least
least
least
least

one
one
one
one

Uppercase letter.
Lowercase letter.
number
special character.

Users Password has Changed

Now with Universal User management it is possible for a

users password to change and in some

cases its required to change every x number of days. This feature will outline how Mobile will handle
the password change.
Changing Password:
When the app tries to make a API call to Dictate API it should receive back a response if the users
credentials are no longer valid. If this occurs the user will be prompted with a screen to allow them to
update their password. The user will not be able to exit this screen until they are able to successfully
enter the correct password. Escentially once the server has notified mobile that the credentials have
changed the user will no longer be able to use the app until they successfully update the password.
Request Password Reset:
At the bottom of the page will be a a test link for "Forgot Password?"
Original: When the user clicks this if will bring up a popup for them to enter their e-mail address.
Once they click OK the app will verify the e-mail address and send the user an e-mail with the reset
link. if the e-mail is not a valid e-mail address that is in our system they will be prompted "E-mail
address is not valid." and will allow them to try and enter the e-mail again or hit cancel.
Updated: 12-1: When the user clicks on the link it will bring up a confirmation box that stated "Do
you want to send a reset password link to *Users E-mail address.*" The user will then have the option
for Yes or Cancel. If they hit cancel they will be taken to the screen they were on. When they click yes
the server will attempt to send the e-mail. If the e-mail is successful they will get a popup that states
"An e-mail was sent to *Users E-mail address.*" The user will have the option to click ok. If there is an
issue and the e-mail was not able to be sent they will get a popup that says "We were unable to send a

reset e-mail to *Users E-mail address.* Please try again later or contact support." The user will
have an option to click ok and confirm the error.
In the e-mail will be a link that will re-launch the app to the change password screen and pass in a new
temporary password. This will then allow them to create a new password.
Multiple Accounts:
If the app is configured with More than 1 account then a link will display at the bottom of the Expired
password page. This will allow the user to with to another account if it is not their account that need to
create a new password. When the user switches back to the expired account they must create a new
PW in order to continue using the app.
**Its very important to note that not being connected to a network should not be treated the same as a
failure to log in. If the user is not connected to a network they should still be able to use our app in an
offline mode.