Access to the DPS requires the user to provide a set of valid credentials within the login form.
By default, the login page is protected by reCAPTCHA v3.
If the reCAPTCHA V3 score is poor or after 5 consecutive failed login attends, a challenge is prompted to the user in order to verify that it is not a robot.
Optionally, if the Two-Factor Authentication is enabled, the user after clicking the login button must also insert the generated OTP code.
In the alternative to using credentials (email and password), users can log in through an external identity provider by using the OpenId Connect plugin.
The password is presented as a one-line plain text editor control in which the text is obscured so that it cannot be read, usually by replacing each character with a symbol (* or ā¢).
In case there is a new version of the Terms of Service or Privacy Policy documents, to complete the login, the user must also review and accept the new agreement.
Forgot Password
Once the account has been activated it could happen that the user forgot his access password, in this case, it is enough to click on the "Forgot password?" link from the login page.
Also, in this case, the application asks the user to provide the registration email to reset the password.
For security reasons, the page does not report any evidence that the e-mail entered does or does not belong to a registered user.
Once the address has been provisioned, the following email with a temporary reset link (60 minutes) is sent to the user.
Hello Edgar Busch,
You recently requested to reset the password of your Comfort365 account.
Click the link below to reset your password:
https://hubner.servitly.com/password-reset/1a550dc7-6848-4ff5-85fc-b89fec8575ae
If you did not request a password reset, please ignore this email.
This password reset is only valid for the next 60 minutes.
Hubner Team
By navigating the reset password link, the user will access a page allowing him to reset the password by providing a new one.
Once updated, the user can now log in with the new password.
Each time the password is updated, the user also receives an e-mail notification of the update.