Password settings update & FAQs
PinnedUPDATED SEPTEMBER 2023
As mentioned on this post, we’ve been rolling out new password settings across all our appspots to better align with OWASP standards. First, thank you for your participation and patience, we’ve been making great headway, and along the way you’ve also helped us identify areas for improvement.
In an effort to remain transparent, we wanted to share some info on issues and experiences we’ve identified, and provide steps on how to remedy them, should you be impacted. Please follow the steps below but should you require any further assistance, don’t hesitate to reach out to Workiva Support.
I’ve been locked out due to password attempt limits
In an effort to prevent brute force hack attempts at your accounts, Workiva will not allow more than six (6) failed password attempts. After hitting this limit, your username will be locked out and you will need an admin to reset your password and log back in.
If you do not know the name(s) of your own admin(s), a quick fix here is to contact Workiva Support who can also reset your password if you need.
Note that a password preview is now available to allow you to see your password to ensure it is accurate.
My username says it is suspended
There can be occurrences where your username becomes suspended. This is usually because your username no longer belongs to an organization, or you have been inactive for some time. Either way, in this state, you cannot change or reset your password until you are reinstated.
To resolve this issue, you will need the assistance of a Workiva Super Admin to regain access. Contact Workiva Support with this request and once reinstated, you can follow the steps to login and set a new password.
There is too long a delay in receiving the OTP email
As part of the new password changes, for unrecognized browsers, when you enter your password, the system will send a 6-digit authentication code to your email, which is only valid for 10 minutes. In some instances, the time in which it took to reach your company email server exceeded this limit and the code is therefore no longer valid.
If this issue persists we recommend connecting with your internal IT team and we are happy to provide additional support if needed.
My company has a bot/robotic process that is interfering
In rare cases, your company may be deploying a “bot” or Robotic Process Automation (RPA). The short and simple version is these bots are designed to operate with predefined parameters and if there is a change in one of those parameters, the bot can fail.
If this is the case for you, to address you will need to reprogram the RPA. Workiva Support is happy to guide you through this process, should you need any help.
Should you run into any additional issues not mentioned above or you have any questions for us just contact Workiva Support. Thanks again for your partnership and have a great day!
-
Have their been any significant changes to the login process for first-time-users? Each user that I have created within the last days, reported that he/she had problems to setting of their initial password. I didn't find any change notification in the Release Notes.
0
Hi Udo!
Yes, there have been some changes to password settings as part of the above mentioned roll-out. The most visible to end users would include the new minimum password length, a password strength meter, password checks against known breaches, changes to failed login attempts, and automatic browser validations with a one-time-password. The waves for this rollout are not yet 100% complete for all accounts, so a global release update has yet to be pushed out. There have been some emails sent ahead of waves, however.
Are your users hitting the issues mentioned above, or something else? Workiva Support is eager to help should they hit any snags.
Let me know what follow-ups you have for me or if you need anything else. Thanks!
0Please sign in to leave a comment.
Comments
2 comments