Automatically disable login for inactive Administrators
Account security will be enhanced by automatically disabling all administrators after 90 days of inactivity. As part of this change, the “Active” checkbox in the administrator profile will be replaced with a dropdown menu offering the following options:
- Active
- Inactive / expired
- Blocked
If an administrator remains inactive for 90 days, their account will be set to Inactive / expired. The current password policy, which requires a password change every 90 days, will remain in place.When When an inactive administrator attempts to log in with correct credentials, they will receive the usual “Invalid username and/or password” message. They will then need to follow the “Forgot your password” link. If the administrator account is Inactive/Expired or Blocked, the user the login will be rejected with the message: "This user has been deactivated." If the user follows the "Forgot your password" link, they will receive an email with instructions after resetting the their password.
Circle Circle or Agency Administrators with the appropriate access rights will be able to reactivate the user by selecting the "Active" status.
Custom Fields: visibility "Traveler read-only"
With the new selection 'Traveler read-only' in the visibility setting, custom fields can now be fully accessible (read & write) to Agency and Company Administrators, while travelers are granted read-only access.
