The user administration of the system, i.e. the user administration in the system settings, can only be configured by system administrators and deals with the configuration of system login services, the administration of individual users registered in the system and the configuration of the login screen for the formcycle administration interface.

Furthermore, system-wide settings regarding user administration and user profiles can be made under the menu item System Settings > General.

Contents

Administration of individual users registered in the system

Individual users can be adminstrated via the menu item System Settings > User. Here, users can be assigned system permissions or new passwords, for example.

System login services

System login services can be configured via the menu item System settings > Login services. How system login services differ from client login services can be read here.

Login screen

The login services available on the login screen for the formcycle administration interface can be configured via the menu item System settings > Login screen.

System-wide settings of the user administration

Under the menu item System Settings > General, system-wide settings regarding user administration and user profiles can be made.

Password policies

The security of user passwords can be configured for different security levels. The length of the password can be set based on a minimum length, with a minimum length of 8. Additionally, it can be enforced that passwords must contain certain groups of characters: Letters in general, lowercase letters, uppercase letters, numbers or special characters. The longer and more complex the password is configured, the more secure it is. If these settings are changed, all newly assigned or changed passwords must comply with these guidelines. Passwords that have already been assigned will not be changed, even if they do not comply with the new guidelines.

Two-factor authentication

For configuration of system-wide settings of two-factor authentication, see Two-factor authentication.

Super user login

By default, the Super User or SAdmin can log in via the regular login screen for the formcycle administration interface. If the checkbox is not set, the Super User can no longer log in via the regular login screen. However, the Super User always has the option to log in via the URL <Base URL>/formcycle/admin.

User profiles

Here, system-wide settings related to the profiles of users can be made.

Automatically create user profiles

If this option is enabled, the profiles for users who log in via external login services and have access to the management interface are created automatically. If automatic profile creation is disabled, users will be prompted to create a profile after logging in for the first time.

Automatically connect user accounts

If this option is enabled, user accounts of external login services are automatically connected to existing formycle user profiles if the email address matches a verified email address of the user profile.

Users can connect additional accounts

If this option is enabled, users can connect their profiles to additional accounts of external login services through My Profile. If this option is disabled, only system administrators can do this for other users.

Users can merge profiles

If this option is enabled, users can connect profiles themselves by adding an email address that has already been verified by another profile to their profile. See Connect profiles in My profile. If this option is disabled, only system administrators can connect profiles.

Client invitations have to be accepted by the user

If this option is enabled, invitations to clients must be explicitly accepted by the user. Until the invitation is accepted, the name as well as the profile picture of the invited person is not visible in the client. If this option is disabled, users are added to the client directly, if possible. The name as well as the profile picture of the user is directly visible in the client without the user confirming it.

User search

When user search is enabled in the system, suggestions are made for users registered in the system when creating client invitations. Also, suggestions are made based on LDAP servers or Microsoft Entra ID login services if corresponding login services are enabled for the backend.

Enabled user discovery exposes users registered in the system. This may not be desirable in all environments.