#dominoforever | Product Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Change ID password in Nomad Web.

Nomad Web to add the function for end users to change ID password. Otherwise end users still need to use Notes client to change the password.

  • Guest
  • Sep 23 2021
  • Needs Clarification
  • Attach files
  • Guest commented
    5 May 01:02pm

    Thx Thomas, I saw that link, but my question was whether 2FA will be part of Nomad Web. Since Nomad Web requires/is part of Domino 12, I assume yes. I read some of the supporting material and I think I know the answers to my questions.

    However, I did note here... https://help.hcltechsw.com/domino/12.0.0/admin/conf_totp_enabling_for_server_through_internetsite.html

    that "TOTP is not supported with Basic authentication or with SAML." Sounds like they are mutually exclusive, regardless of the price of SAML?

  • Admin
    Thomas Hampel commented
    5 May 08:49am

    How to enable two factor authentication is documented here: https://help.hcltechsw.com/domino/12.0.0/admin/conf_totp_overview.html

  • Guest commented
    29 Apr 07:02pm

    Our background is as a SAAS vendor of an Inspection system, which is used by Government Agencies in the US to inspect a number of different types of Establishment, ranging from Restaurants to Schools to Septic Facilities. Our application was written for a Browser UI and has used Domino Offline Services (DOLS) to allow Users to work while offline. Our Clients can have one or more Applications/DBs that we support for them.

    As illustrated in the attached screenshot, "Paragon Login screen.jpg", Users currently have to Login with their "Username" and "Password" in order to access the system. This requirement applies to both Online and Offline access. With Nomad Web, the user will Login to Nomad Web and, on the Home Page, be presented with only the Applications/DBs that they have subscribed to.

    As illustrated, in addition to being able to Login and access the system, Registered Users also have access to the following functions:

    1. Forgot your password. In this instance, if the User has forgotten their password, they can enter their Username and Email Address and the system will send a new, system generated password to their Email address. They can then reset their password using the function described in #3 below.

    2. Forgot your username: In this instance, if the User has forgotten their username, they can enter their Email Address and the system will send an email with their username to their Email address.

    3. Update your registration profile (needs login). In this instance, the User can change their Profile, which includes their username, email address and password. Any or all can be changed at one time. Many of our Clients are required by their IT department to change all of their passwords periodically; although I'm not sure how that policy is enforced.

    The business requirements for this type of functionality are obvious, and stem from one or more of the following:

    1. The User has forgotten their password.

    2. The User's IT department requires that all Passwords be changed periodically, and/or

    3. The User needs to change their name, typically because they have gotten married

    We would expect that the Nomad Web Login screen will include a similar kind of functionality.

    I'd be happy to join a web call to demonstrate/discuss this requirement.

    Separate question... my understanding is that Domino 12 supports Time-based one-time (TOTP) Multi Factor Authentication. Will that be incorporated in Nomad Web? If yes, I would propose that:

    1. It be enabled/disabled by the Server Administrator. Not all Clients will opt for this level of security.

    2. The Server Administrator also has the ability to adjust the expiry time frame from 30 seconds to something more.

    Paul Ryan

  • Admin
    Thomas Hampel commented
    31 Mar 07:14pm

    Ok, you want to change the password of the Notes ID file (in the Vault) from a web browser.

    What you can do is to set up the self service password reset application

    and then adding a (custom) new quick link into the app switcher dialog of Nomad web, which is pointing to the URL of the self service PW reset application.

  • Guest commented
    25 Feb 03:15pm

    Smaller customers can't afford SAML. Need native password change capability.

  • Guest commented
    17 Oct, 2021 12:52am

    Most potential customers of Nomad Web is Notes users that uses Change Password feature in most cases due to enterprise security policy.

    SAML federated login is optional. If SAML federated login is on system requirements, there is not problem, but actually not.

    "Change Password" feature will be mandatory to promote Nomad Web for those customers.

    If HCL has no plan to implement it, declare on product documentation that "HCL Nomad Web does not support "Change Password" feature. Consider SAML federated login instead to maintain password security poilicy." This declaration is important.

  • Admin
    Thomas Hampel commented
    15 Oct, 2021 10:25am

    You can eleminiate the password prompt completely by configuring Nomad Web with SAML authentication. With this configuration in place, do you still need a password change dialog? if yes, please explain why. https://help.hcltechsw.com/nomad/1.0_web/nomad_web_new.html

  • Guest commented
    7 Oct, 2021 01:47am

    It is very very critical for both HCL Software Sales and all customers. This is security issue.

  • Guest commented
    23 Sep, 2021 06:54am

    Yes, we'd like to have this feature since we are not using Notes client