In order to access all Fluid Topics features, it is necessary to create a Fluid Topics account as follows:
- In the portal's header, select Sign up to display the account registration form.
- Enter the following information:
- Full Name
- Password
- Select Sign up to confirm.
The account confirmation process depends on how an administrator has configured the portal:
- Administrators can configure an option that sends new users a confirmation email with a URL to activate their account.
- Administrators can deactivate confirmation emails for new accounts. In this case, users do not receive an email and can access their accounts directly.
OWASP compliance
The Fluid Topics account creation mechanism complies with the following OWASP Secure Software Development Lifecycle Requirements:
- #2.1.3 Passwords may contain spaces.
- #2.1.11 Users can take advantage of login tools like browser password helpers and external password managers, and they can paste text in the password field.
- #2.1.12 Users can temporarily view their masked password by selecting the eye icon in the Password field.
- #2.3.1 Tokens to activate an account expire after a short period of time (2 hours).