Logging in and passwords: the rules

This page collects the rules ABMS follows when you log in: what the login page does, what decides the page you land on, the password rules, what the password reset e-mail contains, how ABMS matches an Office 365 login to a user, and how you move between companies. The step-by-step tasks are in Find your way after logging in, Change language or password, Log in with Office 365 and Reset a forgotten password.

The texts on the login page are in English, whatever language you use in ABMS; a message shown after a failed login can be in English or in Norwegian. The controls, from top to bottom:

Control	What it does
“Please provide your details”	Heading text.
E-mail	The e-mail address you log in with. For a password login, upper and lower case do not matter, and spaces before or after the address are ignored.
Password	Your ABMS password. If you log in with Office 365, you do not use this field: click “Login with Office 365” instead.
“Forgot your password?”	Opens the page where you ask for a reset link by e-mail; see Reset a forgotten password.
“Login with Office 365”	Sends you to Microsoft’s sign-in page (login.microsoftonline.com) and back; see Log in with Office 365.
“Login”	Logs you in with e-mail and password. Nothing happens while the E-mail or the Password field is empty.

ABMS checks these in order:

Situation	What you see
The e-mail address and password do not match a user	You stay on the login page with the message “Invalid email or password.”, in English or in Norwegian.
The password is right, but your user is set to log in with Office 365	You stay on the login page with a message telling you to log in with Office 365; see Log in with Office 365.
Your user, or your whole company, has been deactivated	You are not logged in. Contact your user administrator; see Deactivate or reactivate a user.
It is your first login, or you have never chosen your own password	ABMS opens the page for choosing a new password instead of logging you in. See “Choosing a password at first login” below.
Anything else	You are logged in. ABMS opens the page you were trying to open before you logged in, or else your start page.

Rule	Detail
Who is asked	A user who logs in with a password for the first time, and a user who has not yet chosen their own password. A user who logs in with Office 365 is not asked at first login. A user whose login method is switched back from Office 365 to Password is asked at their next login; see Let a user log in with Office 365.
The page	The same page as the one a reset link opens: the fields New password and Confirm new password and the button “Change my password”, all in English.
While you are on the page	You are not logged in yet. You are logged in once you have chosen the new password.
If you leave the page	You have not chosen a password, so ABMS asks again the next time you log in.
After choosing	The message “Your password was changed successfully. You are now signed in.” ABMS then opens your start page.

Your start page

After login, ABMS opens the page you were trying to open before you logged in, if there was one; otherwise it opens your start page, which is the dashboard; see The dashboard. The one exception to the dashboard as start page is a company that uses a single module:

Condition (all must be true)	Detail
The company has exactly one module	No document modules and no other module.
That module is one of these	Competency, Environmental aspects, Equipment Management, Job Safety Analysis, Risk management or Substance register. A company whose only module is KPI Scorecard or Actions gets the dashboard.
You have the Read right on that module’s row	Without it, you get the dashboard.

When all three are true, ABMS opens that module’s start page instead of the dashboard. The left menu rules for such a company are in The top bar and the left menu.

Password rules

The length, content and confirmation rules apply wherever you choose a password: on your User profile (Change password), on the page a reset link opens, and at first login. The rows about the profile describe the Change password form only.

Rule	Detail
Length	A password must be 8 to 128 characters long.
Content	No other requirement: ABMS does not require digits, capital letters or special characters. The hint on the profile says “Choose a strong password. Use at least 8 characters”.
Confirmation	The password must be typed twice, and the two must be the same.
Mismatch on the profile	Change password on your profile shows “Password confirm doesn’t ,match” (shown exactly like this in ABMS) and does not save.
Empty fields on the profile	Clicking Save password with both fields empty does not save.
Office 365 users	A user set to Office 365 has no ABMS password to change; the Change password link is not shown.

The Change password form on the profile is described in The User profile page.

The password reset e-mail

The steps are in Reset a forgotten password. The details:

Item	Detail
Message after “Send link to email”	“You will receive an email with instructions about how to reset your password in a few minutes.”
Sender	The reset e-mail comes from abms@antenor.no, not from your company’s own address.
Subject	The subject of the reset e-mail is “Reset password instructions”.
Language	The reset e-mail is in English only.
Text, in order	“Hello <your e-mail address>!”; “Someone has requested a link to change your password. You can do this through the link below.”; the link “Change my password”; “If you didn’t request this, please ignore this email.”; “Your password won’t change until you access the link above and create a new one.”
Where the link goes	The link in the reset e-mail opens a page on abms.antenor.no.
How long the link works	The link works for 6 hours after the reset e-mail was sent.
After choosing the new password	The message “Your password was changed successfully. You are now signed in.”
Deactivated user or company	Choosing a new password does not let a deactivated user in. Contact your user administrator.
Office 365 users	A user set to Office 365 gets no reset e-mail; see Log in with Office 365.

Rule	Detail
What is compared	ABMS looks for a user whose username (e-mail address) is the e-mail address of the Microsoft account you signed in with. If there is none, it tries the account’s Microsoft sign-in name.
Upper and lower case	Upper and lower case in the e-mail address do not matter when an Office 365 login is matched to your user.
No match	When no user matches, the login page shows “No existing user with this email address”; see Log in with Office 365.
Users are not created from Microsoft	Signing in with Microsoft never creates an ABMS user and never changes one. Your user administrator must create your user first, with the same e-mail address as your Microsoft account; see Let a user log in with Office 365.
A name or address changed in Microsoft	Does not change your ABMS user. If your Microsoft e-mail address changes, ask your user administrator to change your username in ABMS to match.

Several companies

Rule	Detail
One login	You log in once, with one e-mail address, for all the companies you belong to.
Switching from the profile menu	Click the arrow next to your name at the top of the left menu. Your companies are listed under “Customers”, with the company you are in shown in bold. Clicking another company opens its dashboard in a new browser tab.
Switching from the profile page	On your User profile, the Customer row lets you pick another company; ABMS then switches to it and opens its dashboard. See The User profile page.
Favourites	Each company has its own favourites; see Use favourites.

Logging in and passwords: the rules

The login page

What happens when you click Login

Choosing a password at first login

Your start page

Password rules

The password reset e-mail

How an Office 365 login finds your user

Several companies

Next step

Related