Login, Profile & Password

1. Get and activate an account

1. Create an account
   Depending on the installation, you can register an account yourself or an administrator can create it for you.
2. Complete email confirmation
   If an email confirmation is set up, open the one-time link in the message.
3. Wait for approval
   The administration activates the account and assigns the required groups and rights. Only then are the authorized areas available.

A registration is worthwhile because dbxapp does not expose content and functions indiscriminately; it tailors the workspace to the user: personal settings, own processes, responsible modules and – only if permitted – management functions.

2. Sign in

1. Open Login / Registration from the user menu.
2. Enter your username or email address and password.
3. Select Login / Registration. After successful authentication, dbxapp loads your personal workspace.

3. Own profile and own data

Open the user menu and select My profile. The profile shows only the fields that are intended for your own account. Administrative user management and your own profile remain separate tasks.

4. The Owner Principle

Domain records can be assigned to an owner. This ownership reference links a record to the responsible user. By default, users see and process their own records and workflows. Additional access only arises through expressly assigned groups, rights or administrative roles.

5. Forgetting the password

1. Select on the login page Forgot the password?.
2. Enter username or email address and request the secure link.
3. Open the one-time link within 60 minutes and set a new password.
4. Sign in again. Old sessions are terminated after the reset.

The answer is the same for existing and unknown accounts. So no one can determine via the form which user names or e-mail addresses are registered. If no message arrives, check the spam folder and then contact the administration.

6. Traceability and protection

Security-relevant processes such as log-in attempts, log-outs, sessions and protected actions are logged with time, user reference and technical context depending on the system configuration. IP and trace information helps the administration to place abuse and errors on a timeline. Access to these logs is itself protected by rights and is subject to data protection and retention rules.

Secrets come from the module configuration files. Configuration fields whose name pass, key or token are masked in the demo display. Internal processes still receive the real value; masking occurs only in the explicitly requested display.

Short check

• Use your own account and do not share credentials.
• Choose a long, unique password with uppercase and lowercase letters, number and special characters.
• Log out after work, especially on shared devices.
• Report unexpected login notices or profile changes to the administration immediately.