Signing in, messages and files
Some things in Businessflo are not part of any one business process; every user meets them on every screen. This page says how they behave, so a consultant can tell a setting from a fault.
Signing in
A user signs in with their username, or with their email address typed in the same Username box. The email works only when no user has that exact text as a username and exactly one user carries that email. If two users share an email, they must sign in with their usernames.
The password rule
The password rule is set on the System Administration Setting screen, on the Security tab.
| Field | What it decides |
|---|---|
| Password Minimum Length | The fewest characters a password may have |
| Require Upper Case Letter, Require Lower Case Letter, Require Number, Require Symbol | Which kinds of character a password must contain |
| Password Expires After (Days) | How long a password lasts before the user must change it |
| Earlier Passwords Not Reused | How many of the user's earlier passwords cannot be used again |
| Block After Wrong Passwords | How many wrong passwords in a row block the login |
With nothing set, a password needs at least 8 characters with an upper case letter, a lower case letter and a number. Where companies in one system set different rules, the strictest one applies.
The rule is checked only when a password is set: when a user changes it, when it is reset, when a new password is asked for, and on the user screen. It is never checked at sign-in, so a password made before a stricter rule still works until it expires. Expiry and blocking after wrong passwords act at sign-in.
Error messages
When something cannot be done, Businessflo says so in a plain sentence in the language the user signed in with. If that language has no wording for the message yet, the English one is shown. A consultant can change the wording of any message, language by language, on the Error Messages screen.
When the fault is on the server rather than in what the user entered, the user is never shown the technical text. They see:
Something went wrong on the server. Please try again; if it continues, give this reference to support: …
followed by a short support reference in small print under the message. That reference is all support needs to find what happened. Being offline, a request that took too long, a session that has expired and a missing permission are each worded the same way, in the signed-in language.