aallieri@cfpbmc.org
Add checkbox 'portal access' yes/no on profile email field to resolve issue of multiple profile selection boxes appearing on the new advisor portal before the advisor can access their funds due to having the same primary email on multiple profiles.
Anne Allieri
shared this idea
3/11/2025:Login: We have implemented an update to the portal login process to enhance security and provide more controlled access based on profile designations. This change significantly improves security by limiting who can log in with an email and controlling which profiles are visible to the user. The enhanced login flow helps ensure that users only access profiles relevant to their designated roles. The email login method is now limited to profiles that have a designation enabled for portal access. If the email entered is not associated with any profile, no pin will be sent to the user. If the primary email on the profile does not have a designation enabled for the portal, they profile will be taken to the profile page. If the email is valid, but does not match the expected criteria, the user will be directed to the “Enter your PIN” page. The messaging will clarify that "If we have the email in our system, we will send you a pin." Logins will expire after 1 day following the same process as a logged in user. If a user has a username and password set up they will no longer be able to login with just the email. If a profile has a user set up but not a password, the login is possible with email.