<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>It would be interesting to customise the UI with new colours / logo since the current style is supposed to be used for products.</div><div><br></div><div>Also, please let me know if we need to improve / create new stuff for the UI.</div><div><br></div><div>Gabriel </div><br><div><div>On Jan 24, 2014, at 10:50 AM, Bruno Oliveira <<a href="mailto:bruno@abstractj.org">bruno@abstractj.org</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Good morning Stian, on AeroGear we had a discussion about how to properly reset passwords and we have too much to improve, but here comes my 2 cents.<br><br>-- <br>abstractj<br><br>On January 24, 2014 at 8:03:08 AM, Stian Thorgersen (<a href="mailto:stian@redhat.com">stian@redhat.com</a>) wrote:<br><blockquote type="cite"><blockquote type="cite">Some comments in-line as well.<br></blockquote><br>----- Original Message -----<br><br>I assume you're only talking about when an admin resets the password <br>on-behalf of the user?<br><br>It should be simple enough to add a button to let an admin send a <br>password reset link to a user as we already have that functionality <br>for the user themselves. It's that what you want? We still need <br>the option of being able to set a temp password in case the user <br>doesn't have a email registered (or emails can't be used for whatever <br>reason).<br></blockquote><br>What concerns me about this approach is the fact that once the admin account is compromised, is possible to reset everyone’s account even if you don’t have access do the database. If users doesn’t have e-mail registered, maybe we could evaluate another confirmation method? Maybe TOTP?<br><br>_______________________________________________<br>keycloak-dev mailing list<br><a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>https://lists.jboss.org/mailman/listinfo/keycloak-dev</blockquote></div><br><div>
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>---</div><div>Gabriel Cardoso</div><div>User Experience Designer @ Red Hat</div></div>
</div>
<br></body></html>