I am currently building an interface for creating user accounts within a system. This interface is to be used by system administrators.
I am currently unsure as to what's the best way to present the following scenario for setting the user's password:
- We an define a password for the account or ask the system to generate one.
- We can force the user to change his password upon login.
- We can ask the system to email the user his login and password for confirmation.
- It is possible that we are creating an account for the user over the phone.
I came up with an interface like so:
There seems to be a few problems though:
- The form looks somewhat "bulky" and slow to fill in.
- A welcome email is always sent. But if the user checks the checkbox, we also send the username and password. Is there a way to communicate this better?
- Sending the username and password by plain text is usually frowned upon. See this website dedicated to compiling a list of offenders. If the user elects to send the usernamd and password by email, should we always force the user to change password on login?
- Is there a simplier way to achieve the user flow, keeping in mind that we should be able to define a password or allow the system to automatically generate one?
- Currently, once the user clicks
create account, we redirect them to a page with a list of all accounts and show a flash message that says
account created successfully:
However, accounts can have many fields (some optional and some required) depending on how the administrator has configured the system. In our signup page, only the absolutely required fields are displayed. We feel that in cases where an automatically generated password is used, if the account is created for a customer over the phone, he might breeze through the form, click
create account and realized that he forgot to note down the password to give to the customer. Should we then have a gateway page like so (after account creation)?
I also feel that the gateway page offers too many choices for the user's "next move". Is there a better way to do this if a gateway page is recommended?