Bug 55062 – Automatically get username on password reset

Bug 55062 - Automatically get username on password reset


Summary:	Automatically get username on password reset

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Self Service
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UMC maintainers
QA Contact:	UMC maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2022-08-02 16:09 CEST by Mirac Erdemiroglu
Modified:	2022-08-26 08:37 CEST (History)
CC List:	2 users (show)

See Also:
What kind of report is it?:	Feature Request
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:	Yes
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2022080121000528
Bug group (optional):
Max CVSS v3 score:

Attachments
Screenshot for the better understanding (25.74 KB, image/png) 2022-08-02 16:09 CEST, Mirac Erdemiroglu	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Mirac Erdemiroglu

2022-08-02 16:09:07 CEST

Created attachment 10971 [details]
Screenshot for the better understanding

Is there a possibility to determine the user name in case of a password reset in the self-service via the URL or to take it over directly?
Our customer Bildungslogin needs such a possibility.

Comment 2 Ingo Steuwer

2022-08-26 08:37:59 CEST

(In reply to Mirac Erdemiroglu from comment #0)
> Created attachment 10971 [details]
> Screenshot for the better understanding
> 
> Is there a possibility to determine the user name in case of a password
> reset in the self-service via the URL or to take it over directly?
> Our customer Bildungslogin needs such a possibility.

This was done on purpose -- to limit attac vectors, the user needs some information about his/her account to initiate a password reset.

A feature request could be to add configuration options to allow also other attributes like the e-mail address and not only the username.