Custom Command to re-enable disabled user and email w/ new password

Question

Hello,

I'd like setup a new custom command on the Administrator dashboard that would run the following tasks against a disabled user account simultaneously.

• Enable their account if its disabled
• Set a new secure password
• Modify their user user account so that they are forced to change their password at next login
• Email the affected user with their new temporary password

I've tried setting up the following custom command but the password value is returning null in the email when using the %unicodePwd% value. Is there a workaround for this?

Answer 1

Hello,

The %unicodePwd% value reference resolves into a user password only in Business Rules triggering Before/After creating a user, resetting/changing/self-resetting password of a user. In all other cases, the value reference will resolve into an empty value.

To achieve the desired, you can use a value reference based template in the Reset password for the user action (e.g. TempPwd-%firstname,3%%lastname,3%) and use the very same template in the Send email notification action.

Comments

Thanks for the reply. I tried this out and it seems like the password that generated are too insecure too meet our compliance requirements. For instance, using the template you provided above would result in the password for a user named 'John Doe' to be -

'TempPwd-JohDoe'

How would I go about setting more secure passwords? Is there a better way I should be going about this process?

You mentioned that this value is captured in the resetting/changing/self-resetting password of a user business rule. Would it be possible to modify that business rule to also send an email and re-enable the account if disabled?

---

Hi sirslimjim,

We are doing similar and use the %adm-RandomString,12% for this purpose. Within a custom command, each time you reference the %adm-RandomString,12% after it is first generated it will be the same.

So if you reset the users password to %adm-RandomString,12% and then send them an email containing %adm-RandomString,12% it will be the same.

Hope this helps,

More info about the string can be found here: http://www.adaxes.com/help/ValueReferences.CalculatedProperties.html

---

Hello,

The approach described by Anton should work just fine. Additionally, you can add special characters to the template (e.g. %adm-RandomString,12%/!&) for the passwords to meet complexity requirements.

If this approach still does not meet your needs, you can move the Send email notification action to a Business Rule triggering After resetting password of a user. As a result, you will be able to use the Generate random complex password option in the Reset user password action of the Custom Command and use the %unicodePwd% value reference to send newly set passwords to users. Enabling the user can remain in the Custom Command, but if you want, it can be done in the Business Rule. Finally, you should have the following:

Custom Command Business Rule