Figure 7 – Request new password screen
When the user requests a new password, the correct e-mail address for the ID needs to be entered. This e-mail address has to match the e-mail address already available in the system for this User ID in order to be able to reset the password.
The system performs a check and, if it is allowed (i.e. the ID is not expired and the user has had a successful login since the last password reset), a new password will be sent to the e-mail address associated with the ID in the system. We strongly suggest that since the system-generated password will be a random string of characters, the user copy/paste from the e-mail into the password field. The user will need to change the password at first login (see 2.3.3).
If the user get an error message, then either the ID is incorrect, the user does not have the correct e-mail address for the ID, the ID is expired, or the user has not had a successful login since the last password reset. This last check is to prevent the user from constantly requesting a password reset when the user cannot receive e-mails from the system. If the user is having issues receiving e-mail from the IMDS server, then she/he should work with the IT department and the User ID Forgotten link to trace why the user cannot receive e-mails from the system. If the user cannot receive e-mails from the IMDS system, the user cannot use the system.