One of our users' passwords is suddenly unrecognized by the system. No one has changed the password and the system did not prompt us to change any passwords.
I tried to reset the password from the "manage users" section, but the automatic email sent to the contact email includes a link that just redirects to the same login page, not a form to enter a new password.
I looked up a solution for password reset in the Developer Console. Now it seems the User ID (an email address) is not recognized in our system, even though the user appears to still be active and has never been frozen.
I have 2 concerns:
- The user is not able to log in to the system and I cannot reset the password any way I try.
- Could this be a sign of some kind of security breech? That user login is already restricted by IP address to our office.
Thanks for any suggestions you have!
​Meg
2 answers
Hi Megan, thats odd.
First thing I would check is the user's login history in their record to see where its failing specifically. I would then check to ensure their IP address is whitelisted accordingly, which shoudlnt affect their username or password not working, but always helpful.
I would then go into Password Policies (Setup > Security Controls > Password Policies) and ensure "Require Minimum 1 Day Password Lifetime" is unchecked.
When I first started, that was checked in my org so when an user requested to reset their password, it wouldnt let them since it hadn't been 24 hours since their last reset and they appeared to get "locked out" of the system.++ please check whether user is active or inactive for which you are resetting the password.
