Resetting a password

The Self Service Password Reset plugin creates a link on the login page that invites users who have forgotten their credentials to reset their password.

The user clicks the link on the login page to begin the password reset process.

Figure 1. Password reset link on login page

The link from the login page opens the Reset My Password form.

Figure 2. Password reset form

After the user completes the form and clicks Reset Password, the user_id and email address are validated. If they match, a temporary password is generated for that user and notification is sent to the email address.

Figure 3. Example of the out-of-box notification

The user logs in to the instance using the temporary password. The user is required to create a new, permanent password before continuing.

Figure 4. Change temporary password page

When the user clicks Submit, a session is established.