IBM Security Verify

Shape the future of IBM Security Verify

We invite you to shape the future of IBM, including the product roadmap, by submitting ideas that matter to you the most.

Here's how it works:

Post your ideas

Start by posting ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea

Submit a private idea

If you have confidential information or customer data to share with your idea, then - DO NOT submit using the link below, instead - please open a private feature request.

And finally - if its an issue with expected behaviour, a product defect or a support need, open a Support Case

Link to change/reset user's password

Smart IT Universal Client 2.0.00

When changing/resetting a user's password, an email is sent containing the username and password that is not encrypted, which brings up security concerns to send this info in plain-text via email
It does not help to send separate emails because in most cases the username is the same as the user's email.

One solution that IBM may be able to offer is instead of sending a password, an embedded link is sent that has a configurable time-to-live. When the user clicks the link, they will be able to set a new password.

  • Guest
  • Jun 27 2019
  • Delivered
  • Guest commented
    10 Sep, 2019 11:45am

    This can also be used to implement a "Forgot your password?" feature. You should be able to customize a notification email or sms to send a link with a temp hash. When the user clicks the link it enter to a page to change his password. It should also allow to customize a html page where the user enters the email or cell number or both and it sends the email or sms if the sms or email are real. Should allow to add a google recaptcha or similar to avoid bots spamming your users. Ok and error messages should also be abel to be cutomize.

  • Guest commented
    2 Jul, 2019 02:21am

    Thank you for your idea, we agree with you, and we fortunately already have this idea in the roadmap and plan to implement in coming sprints.

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.