Important

You are browsing the documentation for version 4.2 of OroCommerce, OroCRM and OroPlatform, which is no longer maintained. Read version 5.1 (the latest LTS version) of the Oro documentation to get up-to-date information.

See our Release Process documentation for more information on the currently supported and upcoming releases.

Available in OroCommerce

Configure Global Customer User Settings

Customer User settings can be configured globally, per organization, and per website.

To change the default customer user configuration settings globally:

  1. Navigate to System > Configuration in the main menu.

  2. Select Commerce > Customer > Customer Users in the menu to the left.

    Note

    For faster navigation between the configuration menu sections, use Quick Search.

Display the global customer user settings configuration

  1. To customize any of the options for customer users:

    1. Clear the Use Default box next to the option.

    2. Select the new option.

  2. In the Customer Users Registration section, configure the following options:

    • Default Customer Owner — Service information that determines which user has full access to managing and viewing customer information. Usually, this is the default customer administrator or the administrator assigned to the customer. Applies to the customers created in the back-office as well as to those who register on the OroCommerce website.

    • Registration Allowed — Enables/disables registration of new customers from the storefront login screen.

    • Confirmation Required — Enables/disables the email confirmation step following user registration.

    • Show Registration Link — Shows/hides the registration link from the storefront login screen. The link is next to the Sign In link in the top bar.

    • Auto Login —Enables/disables customer users to login after registration or email confirmation. Disabled by default.

    • Required Company Name — Shows/hides the company name field in the registration form in the storefront. Required for individual customers who do not belong to any company.

    • Show Registration Instructions — Enables/disables registration instructions in the storefront login page. This option is disabled by default.

    • Registration Instructions Text — If Show Registration Instructions is enabled, the text provided in the field is displayed in the storefront login page.

      Display the registration instruction text in the storefront login page

    • Case-Insensitive Email Addresses — If this option is enabled, the letter case is ignored when comparing email addresses. For example, john.doe@example.com and John.Doe@example.com are treated equally. By default, the option is disabled. The identical option for back-office users is managed here. Keep in mind that the uniqueness of email addresses and personal data is checked only for the registered users. It means that no two users can have identical personal information unless they are customer visitors (guest users). Multiple guest customers are allowed to have exactly the same data, including email addresses.

  3. In the Customer Visitor section, configure the options for the anonymous users:

    Display the global customer user settings configuration. Part 2

    • Customer Visitor Cookie Lifetime (Days) — Once the provided period expires, active customer visitor (anonymous user) sessions will be reset. Keep in mind that the uniqueness of email addresses and personal data is checked only for the registered users. It means that no two users can have identical personal information unless they are customer visitors (guest users). Multiple guest customers are allowed to have exactly the same data, including email addresses.

  4. In the Login Attempts section, configure the following options:

    Hint

    This feature is available starting from OroCommerce v4.2.8. To check which application version you are running, see the system information.

    • Enable Failed Logins Limit — Defines whether a user can be locked out when the max number of login attempts is reached. By default, the option is disabled.

    • Max Login Attempts — The number of attempts within the login failure lockout interval that a user has to authenticate before they are locked out. By default, the number is set to 10.

    • Login Failure Lockout Interval — The time in minutes in which failed login attempts are counted. If one failed login attempt is followed by the second failed attempt within this lockout interval, the failed login count starts. The user will be locked out if they reach the maximum number of failed login attempts. Set zero (0) to count failed login attempts globally. By default, it is set to 60 minutes.

    • Account Lockout Time — The time in minutes that indicates how long the user has before they are locked out of the system if they reach the maximum number of failed login attempts. Set zero (0) to disable automatic unlock. By default, it is set to 60 minutes.

  5. In the REST API section, configure the following options:

    • Enable API Key Generation — Enable/disable automatic generation of API access keys for new customer users.

Configure User Impersonation

Hint

This feature is available in the Enterprise edition starting from OroCommerce v4.1.0. To check which application version you are running, see the system information.

Login as Customer User

This option enables back-office users with the Impersonate User role capability assigned to them to temporarily sign into the OroCommerce storefront as a specific customer user. This option is disabled by default. User impersonation is also available at organization level.

User impersonation config option