User-Controlled PIN Management

1. In System Configuration, select Global Configuration Settings > Network Environment > Automated PIN Code Management.
2. Select Email temporary PIN code to users if you want to send an email message that contains a randomly generated numeric PIN code when a new user account is created. Temporary PIN codes are optional.

Any account creation method generates this message, as long as an email address is associated with the account when it is first created. When the user enters the generated PIN(s) the “More” prompt enables the user to either enter a new PIN code, or to swipe a card (if card readers are configured).

By default, the email subject heading and message contents are auto-populated. You can edit this message if you are not using secondary PINs, or if you want to personalize the message for your users.

3. Select the PIN codes you want to allow users to manage.
   • Enable users to reset PIN1 on User Dashboard
   • Enable users to reset PIN2 on User Dashboard
     Note: See Enabling PIN Management for managing PINs on the user’s website.
4. Enter the Minimum and Maximum PIN1 length available for users to create their own PIN. PIN1 length must be less than or equal to the maximum.
   The minimum/maximum values only apply to new PINs, and will not affect existing PINs that violate those limits.
5. Select the Clear PIN data when accounts are locked checkbox to clear the Primary, Secondary, and Alternate PIN data from all future locked User, Department, or Billing Code accounts.
   When the option is selected, the account PIN information fields are greyed-out and are non-editable if the "Account locked" toggle key is selected in the account properties dialog box in Web System Manager. The user account data is cleared form PIN information fields after Web System Manager refresh or AD/LDAP synchronization.

   Select this option in order to reuse PIN data from a user that has been locked in System Manager or disabled in AD or LDAP and then reassign the same PINs to a new user.

6. Click the Clear PIN data for existing locked accounts toggle key to immediately clear all existing locked or disabled account PIN data. This is a one-time operation, and retroactively clears PIN data from all lockec or disabled accounts.
   After the key is pressed, all PIN data will be cleared from the database for any locked accounts after Web System Manager refresh or AD/LDAP synchronization.

   Select this option to remove PIN assignments from the database and then reuse the same PIN data for a new account. Once the cleared PIN data is reassigned to a new account, this data cannot be used by the previously locked or disabled account that is was originally associated with.

7. Click Apply to save the settings.