Automatically disable login for inactive Administrators
Account security will be enhanced by automatically disabling all administrators after 90 days of inactivity. As part of this change, the “Active” checkbox in the administrator profile will be replaced with a dropdown menu offering the following options:
- Active
- Inactive / expired
- Blocked
If an administrator remains inactive for 90 days, their account will be set to Inactive / expired. The current password policy, which requires a password change every 90 days, will remain in place.
When an inactive administrator attempts to log in, they will receive the usual “Invalid username and/or password” message. They will then need to follow the “Forgot your password” link. If the administrator account is Inactive/Expired or Blocked, the user will receive an email after resetting the password.
Circle or Agency Administrators with the appropriate access rights will be able to reactivate the user by selecting the "Active" status.