User Login – Two-Factor Authentication and Troubleshooting

User Login – Two-Factor Authentication and Troubleshooting

Overview

Internal and external users for programs with Windsor-configured nVIRO logins are prompted to enter their login and password credentials when accessing nCORE, regardless of the client environment. When these credentials are entered, the system checks for a valid username. If the username is valid, it then authenticates the password.

Two-Factor Authentication

When configured, if both the username and password are valid, a one-time password (OTP) is sent to the email address associated with the username. Successfully entering the OTP grants access to nCORE.

image-20240726-172938.png
The OTP entry form

Remember Device

If the Remember Device option is selected during login, the user will bypass the OTP requirement on the device they logged in from for 30 days.

Login Troubleshooting

The following guidance can help identify and resolve common login issues.

Incorrect Username

If an invalid username is entered, this message appears: “Authentication attempt failed. Retry with valid credentials.” Both the username and password fields are highlighted in the same color. The color may vary based on browser settings.

image-20240726-172905.png

Incorrect Password

If a valid username is entered, but the password is incorrect, this message appears: “Authentication attempt failed. Retry with valid credentials.” The white password field indicates that only the password failed authentication.

image-20240726-173445.png

Users have nine attempts to enter the correct password. If the ninth login attempt is unsuccessful, the account is locked. To prevent this, users are encouraged to click the Forgot Password? link on this page to reset their password by correctly answering predefined security questions.

Expired Password

If an expired password is entered, a window appears prompting the user to update their password. Users cannot log in to nCORE until their password is updated.

A dynamic checklist displays a green check when each password requirement is met:

  • One lower-case character

  • One upper-case character

  • One number

  • One special character

  • 8 characters minimum

image-20240626-215000.png
The dynamic checklist for updating expired passwords

Once a new password is created, the login page reappears, and the user can enter their username and new password to access nCORE.

Create New Password

To update an account password under other circumstances, the user is prompted to create and enter the new password twice, with password requirements displayed in red text. The new password must contain eight characters and include a number, an uppercase letter, a lowercase letter, and a special character.

If the passwords entered do not match, a message appears below the second text box prompting the user to ensure both entries are identical.

image-20240726-175249.png
Message displayed when the passwords entered do not match