Show Advanced KnowledgeHide Advanced Knowledge

Assign Undisclosed Random Password While User Creation

1 Requirements

By now, it is not really possible to create passwords for users in a way that fits strict privacy rules:

• If creating a user manually or by XML import, the administrator knows the password.
• This also applies to using the option "Change Password on First Login": The administrator could log in as the user, change the password and only then notify the user.
• If creating a user manually, the password field cannot be left blank.
• If creating a user by XML import without password (this actually is possible) and redirecting him/her to the password assistance in order to create his/her own password, this entails quite a long process wasting the user's patience.

So, a helpful function would be have a randomized password generation not only for self-registration (as available by now) but also for (global or local) administrators creating users.
In this case, the administrator could not enter a password but ILIAS would generate it and dispatch it to the user.
The administrator would not be aware of that password.
Moreover, it should not be possible to export that password into .xls or .csv.
Also when updating the password, the administrator could only order a new password for the user without being able to see it.
Moreover, a helpful enhancement would be to update the (randomized) password for several users at once.
 
A setting like this should force ILIAS to send a notification to the user (after creating as well as modifying the account) as this is the only way to inform him/her about the new password. In case the user account doesn't contain an e-mail address, this should deactivate the function for this account.

2 Status

• Scheduled for: Not scheduled yet (will be set by Jour Fixe)
• Funding: Required
• Maintainer: (will be set by Jour Fixe)
• Implementation of the feature is done by (company, developer)
• Contract settled: No
• Tested by / status: tbd

3 Additional Information

Contact the following persons if you want to know more about this feature, its implementation or funding:

• Information about concept: Florian Suittenpointner, suittenpointner (at) qualitus.de
• Information about funding: tbd
• Information about implementation: tbd

4 Discussion

Zenzen, Enrico [ezenzen], 18 AUG 2022: This request no longer fulfills the requirements of the Feature Wiki. In consultation with the maintainer I change the status of the feature request to "Redundant / outdated". If the request is still relevant, please update template and mockups.

5 Implementation

...