0

I have a very common use case where an admin is creating an account of the user and then I need to send the login id generated by my system to the user. And the user will need to set a password on the first login.

So my question here is should I send the user id on email and if yes, then what are the security risks that must need to be incorporated?

Improve this question
3
  • are you the admin creating the account?what is the procedure for setting up the first password?
    – yeah_well
    Jun 1, 2019 at 18:01
  • The procedure I thought is that when admin creates an account then he will add user's phone no also. So when user will try to log in first time using his login id then he will receive an OTP on his phone and after entering the OTP he can set his password.
    – Dhruv Pahuja
    Jun 2, 2019 at 6:35
  • Please write the complete procedure and explain to me why an admin is creating other users account and where does he get users mobile numbers?
    – yeah_well
    Jun 2, 2019 at 7:08

1 Answer 1

Reset to default
0

Login ID should be considered public. So feel free to send it per email.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.