Users, in my experience, are bad at password management. I had an experience today that pointed out what I perceive to be a missing feature of your service.
A user forgot his password, made 4 attempts to access his account, then promptly recieved an email stating that his account was locked for 60 minutes. I, as a super admin, and Ringcentral's own tier 1 and 2 support could not remove this lockout.
Goal: I would like for account admins to have the ability to remove account locks from user accounts.
Some info:
Thanks for your consideration.
A user forgot his password, made 4 attempts to access his account, then promptly recieved an email stating that his account was locked for 60 minutes. I, as a super admin, and Ringcentral's own tier 1 and 2 support could not remove this lockout.
Goal: I would like for account admins to have the ability to remove account locks from user accounts.
Some info:
- User password resets are intentionally disabled on our account.
- The first lockout duration was 60 minutes. There were no shorter duration previous to this. This is overzealous for a normal user account in my opinion. A 5 minute lock (which also prompted the user to contact his administrator) would be a good first step, followed by an hour lock
- The user typed in his password only about 4 times by his recollection. Again, following this with a one hour lock seems a little overzealous.
- There is no feedback in the UI (on Ringcentral mobile or web) letting the user know about the lockout, only a security email sent. (I assume this is a security precaution)
Thanks for your consideration.
-
1,162 Points
- :(
Posted 3 years ago
-
80 Points
-
132 Points
-
1,036 Points
-
320 Points
Rona Orenstein, Employee
-
382 Points
-
2,690 Points
-
266 Points
Cecile Glassy, Champion
-
19,258 Points
USA-based acct | 2287 Users | 3800 DID lines | 28 sites | all Polycom VVX500 phone handsets
2018-05-31 Saadet or Mike Ferringer - can you please request an update on this.
2018-05-31 Saadet or Mike Ferringer - can you please request an update on this.
Saadet - Community Support, Official Rep
-
55,710 Points
Hey Cecile,
Sorry :( I never heard back from our Product Team about an ETA.
Sorry :( I never heard back from our Product Team about an ETA.
Cecile Glassy, Champion
-
19,258 Points
Cecile Glassy, Champion
-
19,258 Points
Chris Duquette, Champion
-
16,052 Points
something should happen, even a quick patch between now and a final solution would be received well at this point, i think.
J.B. Ferguson, Champion
-
34,682 Points
FWIW, as a software developer I can tell you that in most cases there is no such thing a a "quick patch". A patch is a set of changes to a
computer program or its supporting data designed to update, fix, or
improve it. This includes fixing security vulnerabilities and other
bugs, with such patches usually being called bug fixes, and improving the usability or performance.
A patch to fix a bug would therefore be a solution. As such, any solution is a final solution when it comes to a bug fix (unless you are talking about making the GUI look pretty to "finish up" the solution).
Finally, depending on the coding involved, in most cases any fix may not be "quick". Some bug fixes require a complete rewrite of a module or other areas of code.
A patch to fix a bug would therefore be a solution. As such, any solution is a final solution when it comes to a bug fix (unless you are talking about making the GUI look pretty to "finish up" the solution).
Finally, depending on the coding involved, in most cases any fix may not be "quick". Some bug fixes require a complete rewrite of a module or other areas of code.
Chris Duquette, Champion
-
16,052 Points
yeah guess i was using the wrong terms, just meant something to hold us over until they can make it a final solution. if that's not possible, due to "too hard to rewrite all the coding" or "security protocols" or whatnot, then so be it.
J.B. Ferguson, Champion
-
34,682 Points
That's my point....if they make any changes ("something", as you term it) to hold everyone over, it would be a fix/final solution. It's either fixed or not in program development when something isn't working as intended -or- not as the client wants it to work (with RIngCentral users being the clients in this case). If RingCentral doesn't see this as a "bug" or a functionality shortfall, then it will likely never be fixed. If they listen to their clients and decide to make the functionality as requested by their clients, it will be fixed when they deem appropriate.
(Edited)
Chris Duquette, Champion
-
16,052 Points
makes sense.
Yes, I just called Ring Central to get this issue escalated.
-
204 Points
There are most definitely patches that provide quick fixes and/or temporary solutions in programming that do not solve the problem wholly or do not encompass everything the company/programmers want to do with the particular feature. Instead it patches a "hole" in their program that many customers for years have complained about as a quick fix to hold everyone over till they get a more permanent solution. Quick is a relative term of course, but there is no need to pick apart people's words.
Chris, your original post was fine and correct.
Chris, your original post was fine and correct.
Bob Robinson, Champion
-
2,910 Points
Wonder how many votes are needed to get the attention of the developers? I think 105 votes is more than I have seen on just about any idea.
Saadet - Community Support, Official Rep
-
55,636 Points
Hey Bob! I believe our Product Team is working towards a solution for this issue but they haven't given me many details just yet. When I learn more about the solution, I'll share!
-
258 Points
When it is easier for me just to delete the extension and add it back again and make the password what I want it to be, reprovision, etc... faster than waiting for the lockout, then the problem is with the admin console. They need to fix this. When we are setting up a call center and have new people sitting on their hands for HOURS because of a technical detail we can't control, it makes the tech services look bad...and that makes us shop for another provider. This is basic. This is an old request... and it should be easy to fix. If I can change the password, then when I do the lockout should be cleared. Simple.
-
92 Points
-
190 Points
-
878 Points
This was posted 3 years ago. How is this not implemented yet? As super admin, you should be able to override.
ORTHOPAEDICS, Champion
-
272 Points
I'll just go ahead and beat RingCentral to the reply, since this is the only answer in 3 years:
Sorry, we have not received an ETA on if/when this may become a feature.
You do have the option of contacting our Support Team who can override the lockout as long as they can verify you as an Admin on the account.
Sorry, we have not received an ETA on if/when this may become a feature.
You do have the option of contacting our Support Team who can override the lockout as long as they can verify you as an Admin on the account.
-
258 Points
It's a tremendous reason to leave RingCentral for another VoIP provider. I have a small call center with temps who routinely lock themselves out. How on Earth did anyone think it would be okay for us to leave an agent off-queue for an hour like this? What I've had to do as a workaround is set up all agents' phones with a pool email address that I can access so that I can do the reset on their behalf. The side effect, which is okay in our environment, is that they may not use the app or inbound voicemail, which I configured in the template.
For keeping executives happy, the inability to unlock accounts make administrative technologists look stupid. Come on RingCentral... this request is THREE YEARS OLD. It's a checkbox or a button on the admin pages. That's it.
For keeping executives happy, the inability to unlock accounts make administrative technologists look stupid. Come on RingCentral... this request is THREE YEARS OLD. It's a checkbox or a button on the admin pages. That's it.
-
80 Points
Saadet - Community Support, Official Rep
-
55,710 Points
-
878 Points
Hey there... Any update on this?
Saadet - Community Support, Official Rep
-
55,710 Points
Hey Chris, still no ETA. When that changes, I'll post an update :)
Teresa Habeck, Champion
-
1,344 Points
Why is there no update on this. This does not make any sense to why Ringcentral has chosen to take the ability away from the customer admins to unlock accounts.
-
878 Points
How about as a short term solution, add it to the API so we could execute the reset via a CURL command. This would be much better than having to phone into support, until you can get it added to the admin console.
Saadet - Community Support, Official Rep
-
55,710 Points
