Password Reset external users

Dear Team,


We would like to log an Ehancement request regarding the below requirement:

External users often type their email in the User Name field and Vault accepts it with no error message.

Could you please check if the below options are possible to have in the login page of Veeva Vault?

1. Can we have “@<domain>.com” written as predefined text which can not be deleted ?

2. And secondly if Username doesn’t exist an error message stating “Invalid User Name” ?

3. Under “Forgot user name” state : Username can also be found in your Welcomemail from Vault.





1 comment

  • Avatar
    Matthew Porter

    Number 2 may be a security issue as brute force on the page could determine a username.

Please sign in to leave a comment.