# Security Manager

Security Sign On |

Once security has been set up, a Sign on window prompts users to enter their user ID and password when they select a specific object that has access restrictions.

For information on defining object security and the various locations where security can be applied, see Restricting Access.

In addition to entering user ID and password, if Two-Factor Authentication is set up, users will be required to enter a random 6-digit security code, which is sent to them in an email or text message, to verify their identity when they are logging on.

This window consists of the following:

Userid | Unique name for identifying a user (not case sensitive). #### Important Note: If the %NOMADS'AutoLogon property is enabled and the user registration file contains a user ID that is identical to the user ID used for the Windows login, the password is not checked; therefore, the login window does not display.
Password | Password used to log on to the system (case sensitive). To check that the password is entered correctly, click the Password eye button to toggle between displaying an encrypted and unencrypted password. Each new user is initially assigned a default password that is the same as the user ID. For example, if the user ID is SMITH, the default password is SMITH (case sensitive). To maintain system security, this default password should be changed as soon as possible by using the Password Change window. (The Password toggle button was added in PxPlus 2023.)
Change Password | When selected, invokes the Password Change window when the Logon button is clicked. (By default, this check box is not selected.)
Logon | Button used to access the system. If the log in is unsuccessful after three consecutive attempts, a message will display. The user then needs to exit and try logging on again.

Two-Factor Verification

When Two-Factor Authentication is set up, the Two-Factor Verification window displays when a user is required to provide identity verification before being allowed to log on. This window instructs the user to enter the security code sent to his/her email address or SMS phone number, depending on which one was provided in User Maintenance.

Example:

This example shows that the security code was sent to the user's email address. The user has entered that code and needs to click the Verify button. This message is similar to the one that is sent to a user's SMS phone number.

This window consists of the following:

(Input field) | Enter the 6-digit security code sent to you by the system via email or text message.
Verify | (Available when security code is entered) Button that is used to verify that the security code entered matches the one sent by the system for validating the user's identity. The system allows a total of 10 minutes to enter correct code.
Resend | The system sends a new security code to the user's email address or SMS phone number, which the user must enter for verification. This new code replaces the previous code that was sent.
Cancel | Stops the verification process. User is not allowed to log on.

If the user has provided both an email address and an SMS phone number in User Maintenance, the system displays the Device Authentication Required window to allow the user to select the preferred option:

This window consists of the following:

Send it to your email account | Security code will be sent in an email to the user's email address provided in User Maintenance.
Send it to your phone as a text message | Security code will be sent in a text message to the user's SMS phone number provided in User Maintenance.
Cancel | Stops the verification process. User is not allowed to log on.

Password Change

The Password Change window allows users to change their password. This window displays automatically when users are logging on to the system for the first time using their default password. After their initial logon, users can change their password at any time by selecting the Change Password check box in the Sign on window prior to clicking the Logon button.

This window consists of the following:

New Password | Enter the new password. To check that the password is entered correctly, click the eye button to toggle between displaying an encrypted and unencrypted password.
Confirm Password | Enter the new password again. Must match the New Password entry. To check that the password is entered correctly, click the eye button to toggle between displaying an encrypted and unencrypted password.
Update | Button that is used to create the valid password and update the NOMADS user registration file.

Forgot Password

When Two-Factor Authentication is set up, if a user enters an incorrect password during system logon and the user's email address and/or SMS phone number are available, the system will provide a Forgot Password option in the Sign on window:

Selecting this option allows the system to re-authenticate the user for the purpose of resetting his/her password by displaying the following message:

If the user responds Yes, the system proceeds to verify the user's identity by sending a security code to the user's email address or SMS phone number. If the verification is successful, the Password Change window displays to allow the user to create a new password.

If the user responds No, no identity verification is done, and the user is returned to the Sign on window.