WFDSS News | 8.2 Release

Release Notes 8.2

11/29/2023 - Release 8.2

Two Factor Authentication (FAMAuth)

Profile Management

NOTE: Due to the transition to FAMAuth, the term user account is now replaced with user profile. The help and associated documentation will be modified over the next month to reflect this change.
WFDSS access is now managed through FAMAuth. Users must authenticate with either Login.gov or E-Authenticate. Captcha technology is no longer in use.
Users no longer enter usernames and passwords to access the system; accounts no longer lock.
The WFDSS Homepage Request Account link is updated to New User Access link. Production and Training Banners updated the IIA Helpdesk text to indicate they assist with access not passwords.
Production and Training login pages have been modified to remove the username and password fields and other links that are obsolete as a result of the FAMAuth transition.
To better differentiate between environments, the system name is in bold text once the user is logged into WFDSS. The FAMAuth tiles and logos are named by environment.
A banner at the top of the Production and Training login pages was added to allow for the posting of user messages.
Users receive email reminders at 10, 3, and 1 days prior to profiles becoming disabled. Users receive an email for each environment. Once disabled, users with pre-approved emails receive an email informing them they can auto re-enable. Users with non pre-approved emails receive an email that they need to contact their GAE to re-assign roles to regain access to their profile. The number of days before an account becomes disabled increased from 270 to 330 days.
Manually disabled users and users with disabled non-pre-approved email domains will not be able to re-enable their profiles without first contacting their GAE. The GAE will reassign the user’s role assigned from disabled to another role.
Disabled users by the system utility and users with pre-approved email domains can auto re-enable their profiles by accessing the system. They are re-assigned the roles they previously held.
Administration, Helpdesk, and Support roles can edit profiles and emails for users and verify their Security Q&A.
Users can change their own email address through a property file. The text displayed on the My Home screen is dynamic based on the how the property file is set.
The Helpdesk can edit a user’s profile email through a property file.
Pre-approved user accounts (USDA, NPS, FWS, BIA, BLM) that became disabled prior to August 28, 2019, had their previous roles set to Anonymous. This is the result of a bug that was corrected at that date. Going forward these users' previous roles show as Viewer, allowing them to use the auto re-enable feature.
Users attempting to access the system whose profile does not match the email they are authenticating with (Login.gov or FAMAuth), receive a message stating there is no email match and are directed on how to request a profile.
Columns in the User Security List and Export were modified: Last activity changed to Last Login Primary (and secondary);
330 Days of inactivity primary and secondary added; removed columns of password expired, 5 failed attempts and 60 days of inactivity.
user state is either archived, disabled, or empty; Email address moved location in User List, User Security list, and export .xls.
User Audit Trail tracks the following: the access pathway (Login.gov vs. eAuthenticate), if a user has self re-enabled their profile, if the profile was created using the copy feature.
Login ID is renamed to WFDSS Profile Name.
Support Users can create multiple profiles for the purpose of testing. Users with multiple profiles can access their different profiles using radio buttons from the Multi-account access page. Archived profiles cannot be accessed. Disabled profiles in which the previous roles are set to Anonymous cannot be re-enabled.