Password recovery¶
Password recovery lets a local user set a new password without waiting for an administrator. It is available only when the workspace has an email server configured and enabled.
Where the link is
Forgot your password? appears on the password step, not on the workspace step. Complete the workspace and username first.
Request a recovery link¶
- Complete the workspace and username and select Next.
- On the password step, select Forgot your password?.
- The Recover password screen opens with the workspace and username already filled in and the cursor in Email.
- Type the email registered for your account.
- Select Send recovery link.
The screen confirms that the link was sent and that it is valid for 24 hours.
The email has the subject Password recovery - Lurana BPM, greets you by name, includes a Reset password button, and repeats the link as text in the footer in case the button does not work in your client.
Reset the password¶
- Open the link in the email.
- The Reset password screen shows your username.
- Type the new password in New password and again in Confirm password.
- Select Update password.
Rules enforced by the screen:
| Situation | What you see |
|---|---|
| The two fields do not match | The passwords do not match |
| Fewer than 4 characters | The password must be at least 4 characters |
On success the password is replaced, the screen confirms the change, and you are sent back to the password step with your username filled in. The old password no longer works.
Requests that are refused¶
| Case | What you see |
|---|---|
| Email does not match the account | The username or email does not match any registered account |
| Text that is not an email | Enter a valid email address |
| Directory (LDAP/AD) account | This account uses external authentication. Reset the password with your identity provider |
| Workspace without an email server | No email server is configured or enabled. Contact your administrator |
In every refused case no email is sent.
Links that no longer work¶
A recovery link stops working when it has already been used, when it has been altered, or when more than 24 hours have passed. The screen reports an invalid or expired link and does not offer the password fields. Use Request a new link to start again.
Related¶
- Sign in — the two-step sign-in flow.
- Email servers — where an administrator enables outgoing email.