Resetting Forgotten Passwords

Security Component provides a standard procedure to handle the forgotten passwords.

Please follow the steps below to implement the necessary functionality.

1.	Prepare a forgot password page and configure a SMLProcess with the following content:

  <process name="ForgotPassword" basedon="mor.Security.SMLProcess">
    <param name="sml">
    SendResetPasswordMail(username,email,'ResetPasswordPage')
    </param>
  </process>

In the page user is asked to enter either his user name of email address.

2.	Prepare a reset password page and configure a SMLProcess with the following content:

  <process name="ResetPassword" basedon="mor.Security.SMLProcess">
    <param name="sml">
    ResetPassword('',newPassword,newPasswordAgain)
    </param>
  </process>

This the should be protected with an accessControl element. In the page the user is asked to enter the new passwords.