The "Remember Me" button.

gcosta

Hi,

We have situations i which the same account (login / password) needs to be passed to a different collaborator of the company, and the access of the old one needs to be deactivated… But I have had a problem to unlink the accounts of some users when they have “Remember Me” option active. The point is that even changing the password of the account, the old user can still access Solibri Office with the previous password…

I think if any user leaves the company, but he has the license on his computer, even if we change his password, he would still keep the license, which would force me to create a new account, put the license on it and pass it on to everyone (or register manually) in that department, which is a problem.

How does the “Remember Me” operates ?
When opening Solibri, it doesn’t re-validate the credentials (login / password) previously used ?
Or it revalidates only after a x period of time, for example, every X days it revalidates te credentials ?

Eric

The way you intend to use a single license by sharing the username/password across multiple users is not what you should be doing.
Instead, users should have dedicated accounts to use the floating licenses and once they’re not part of the organisation, removed from the pools and deactivated.
The “Remember Me” button does what it’s supposed to do.
The period is 30 days after which users will be forced to log in again.

As indicated in our help, we do not recommend using “Remember Me” for “public” machines:
https://help.solibri.com/hc/en-us/articles/1500004219002-General-Settings

gcosta

Pls. let me clarify one important point here, the user/password is not being “shared across several (or multiple) users”.
There’s only one user using the login/password… however the login is a generic email of the company (such as “[email protected]” not a specific name of a collaborator …) is this irregular use ?
Anyways… if the Remember Me is accessing the server to get the quantity of licenses allocated in the pool (and it does that…) why it is not checking also the password when accessing the server ?
My understand is that Remember Me is a convenience that uses the last Login/Password entered and just repeat that when accessing the server to check available licenses … again, as a convenience for the user not need to enter that again … however, if the password is changed in the server it should not allow accessing in the server… and should open a dialog asking the user to enter the credentials again (with the new password …).

DavidCadtec

In my opinion Remember Me = “Remember the last credentials i used to login”
It’s a convenience…

It just exempt user to type the last credentials he/se used i last login…
Even if active (Remember Me option…) Solibri will access the server anyways and check for available licenses in the pool. But this only after login successfully in to the server with the actual valid credentials.
For security reasons… Any change in the password is mandatory …
Login (i.e. password settings) should always prevail.
In other words: If the password is changed by the … next time Solibri is launched (even if Remember Me is active … ) it should ask user to login with actual (valid) password .

Eric

@gcosta Thanks for giving insights on the context where this occurs.
For this specific case, the administrator of the workstation can do the following in the Windows Registry:

Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\JavaSoft\Prefs\com\solibri\sae\smp]
"keep-logged-in"="false"
"saved-product-choice"="/O/F/F/I/C/E"

That should enforce users to always log in and solve the issue.

gcosta

Thanks for the suggestion Eric.
However, as i understand , with this we are removing the Remember Me feature/ benefit temporarily…
But what would actually solve it would be for Solibri to authenticate the password every time it is opened… even if Remember Me is activated.