Important updates are on the way to make it easier for AppointmentPlus® users to update their login information. We’re also improving the tools you use to manage passwords as a Reseller of AppointmentPlus software. This article will cover the updates we’re making to the Reseller Portal, and the general security improvements you should expect to see after the update.
On Saturday, April 16, 2016, we will be rolling out these changes to our application beginning at 10 pm Pacific Daylight time. During this period, the system will be temporarily disabled for approximately three hours. We plan to have the system back online by 1 am Pacific Daylight time on Sunday, April 17, 2016.
Please review our notice to administrative users for more details about the changes that will impact your clients and their customers.
Setting temporary passwords as a Reseller
One of the most important changes we’re making is to the process of creating permanent passwords. Reseller users can still add and reset passwords for Site Administration users, but the passwords they create will always be temporary. After the update, only users will be able to create permanent passwords for themselves.
Browser auto-fill disabled for passwords
To enhance browser security for all users, we will disable auto-fill of the Login and Password fields on the reseller login page. At each login attempt, both the login and password will need to be keyed in manually.
Last five passwords restricted
It will no longer be possible to create new passwords that match one of the five most recently used passwords for any given profile. This restriction applies to administrative and end-user profiles.
Passwords used prior to the update will not be restricted. The system will start keeping track of a user’s recently used passwords beginning with their next password reset after the update has occurred.
What to do
This system update will not change any existing passwords, nor will it require users to update their passwords. However, we strongly recommend you check your reseller profile now, before the system update occurs, to make sure it includes a valid email address. This will make it easier for you to create a new password if you forget your existing password after the update.
User Interface Changes
New Direct Login links
Direct Login links will be removed from the Reseller Control Panel. If you currently use Direct Login links to access your AppointmentPlus account through a third-party system, your existing links will only continue to work until the login or password associated with them has changed.
Existing login links will be replaced with new login tokens and will show for each account in your Reseller Control Panel. Unlike the old Direct Login links, your new links will continue to work after a change has been made to the applicable profile’s login information.
New “Login As” links
New “Login As” buttons will replace the existing “Admin Login” buttons used to access client accounts. The new buttons are being added to the account search results to allow reseller users to access each account as the Headquarters Administrator:
New Staff Maintenance Tools
We’re adding two new buttons to the user profiles listed in the Staff Maintenance section of the Reseller Control Panel. These new buttons will allow Reseller users to trigger a password reset email for any profile, and access Site Administration as any user: