Admin User - Password Management Scenarios DRAFT (WIP)

There are 2 scenarios whereby password reset needs to be completed for a TIS user

Forced Password reset on first login - TIS users may already have a login to Intrepid, this cannot be transferred across to TIS so they will be set up as a new user within TIS. When this is done, they will be required to set up a secure password.
Forgotten Password - TIS users may find themselves unable to login as they have forgotten their password, they will be able to request a password reset directly.

Scenarios

Process Name	PM - 1 Force Password Reset	Comments
Description	Trigger to request user resets their password for first login into TIS
Actors	TIS Development Team TIS Admin Team TIS user (all types)
Pre-Conditions	User account set up in TIS User email known
Post-Conditions	Password changed on first login
Process Steps	Define users Select to send auto generated generic password to all Send password via email User clicks login link in email System presents login screen User enters username and auto generated password System prompts user to change password User enters new password twice System confirms changed password System logs user into TIS
Alternative Process	PM-2 User loses the email / temporary password does not work; request password reset
Rules	Auto generated password must not be displayed to the TIS Dev Team or TIS Admin Team New password must contain: letters and numbers in any combination Auto generated password does not expire Present error message where incorrect password entered Present error message where incorrectly formatted new password entered	Joanne Watson (Unlicensed), Alistair Pringle (Unlicensed) - please confirm rules
JIRA Reference
Audit

Process Name	PM - 2 Request Password Reset	Comments
Description	User requests to change their password directly in TIS
Actors	TIS User
Pre-Conditions	User account set up in TIS User email known
Post-Conditions	Password changed
Process Steps	User navigates to login screen User selects "Forgotten Password" link Request triggers password autogeneration System sends password via email User clicks login link in email System presents login screen User enters username and auto generated password System prompts user to change password User enters new password twice System confirms changed password System logs user into TIS
Alternative Process	N/A
Rules	New password must contain: letters and numbers in any combination Present error message where incorrect password entered Present error message where incorrectly formatted new password entered	Joanne Watson (Unlicensed), Alistair Pringle (Unlicensed) - please confirm rules
JIRA Reference
Audit

Process Name	PM-3 User Changes Password	Comment
Description	User is able to decide to change their password at any time	Do we want password changes to occur every so often?
Actors	TIS User
Pre-Conditions
Post-Conditions
Process Steps
Alternative Process
Rules
Jira Reference
Audit