Currently, when a parent's portal account is locked due to failed login attempts, the school administrator must manually locate the account in Parent Portal Manager, unlock it, and send a reset link. This creates unnecessary support overhead, especially in schools with large parent communities.
Proposed improvement: When iSAMS detects an account lockout event for a parent portal user, automatically send a password reset email to the parent's registered email address — without requiring admin intervention.
Expected behaviour:
Account is locked after X failed attempts
System automatically emails the parent a reset link to their registered email
Admin receives an optional notification log of the auto-reset event
Account is re-enabled once the parent successfully resets their password
Business value: Reduces tech support tickets, improves parent experience, and frees up admin time. This is standard behaviour in most modern authentication systems.
Surely the lock is already released automatically after the configured lockout period. And the portal user can initiate their own password reset by clicking on "Forgotten your details?" on the login page.
The main issue as I see it is more that the account lock notification email is utterly unhelpful, see https://ideas.isams.com/ideas/MIS-I-4507