JJOLT Password Security Changes

JJOLT Password Security Changes Effective August 2007

JJOLT is upgrading its security process to improve service delivery to its customers. The first part of that upgrade is the implementation of a security question and answer that will allow users to be emailed their password instead of having to submit a password reset form to the security administrator.

All passwords are still stored as encrypted within the database. Neither JJOLT team members nor programmers know what the passwords are.

All new users, including users previously deleted, will have to answer a security question the first time they log into JJOLT. And you cannot proceed from the announcement page without selecting a question and creating an answer. You will only have to enter this information one time. The only exception is if you have been deleted for some reason and have to be re-activated or get locked out of JJOLT. These two scenarios require a new security form and new security question and answer.

Users select the security question from a drop down and enter an individual answer to that question and they are stored in the database. No special characters are allowed.

Example of security questions include:  What is your mothers maiden name  What is your pets name  What is your favorite Disney character  What was your first car  What is your favorite sports team

If a user has forgotten their password, these are the steps to get your password sent to you  Enter your user id  Click forgot password  It will display your security question (unless you have never entered a security question, then you will have to contact the JJOLT help desk)  Answer the question correctly  It will email your password to the email you provided, normally takes 2- 5 minutes for response

Users are allowed 5 attempts at entering the correct response before being “locked out” of the system and having to complete a security form. See JJOLT help site for JJOLT security form at: jjolthelp.famcare.net. This form can be emailed, faxed or mailed to the security administrator listed on the form. The JJOLT security administrator resets the password to the default password of 123456. Users will have to complete the following steps to get logged back on:  Enter user id  Enter default/temporary password  Create new password  Re-enter new password to confirm  Click Logon  Go to announcement page o Select security question o Enter Security answer o Click proceed

Errors/Problems that requiring a call to the JJOLT help desk (517-335-3537) for resolution and assistance:  Multiple users having the same email address in the security table  Users without an email address in the security table  Users with incorrect email address in the security table