Is it possible to force a password reset on the first login to the 3cx webclient?

[5i3cxuser]

Is it possible to force a password reset on the first login to the 3cx WebClient

I would like to know if this is a feature that already exist and how to implement this or if it is possible to enable MFA for the WebClient.

 

[Saqqara]

To answer your questions,

You can not force a password change, the only way to change the password is within 3CX Management console

Webclient does not support MFA

 

[ChrisC_3CX]

To add to what Saqqara said regarding MFA, in v18 we have introduced SSO for webclients so MFA will be available via the platform used for SSO.

 

[NickD_3CX]

You could modify the default Welcome Email and remove the WebClient credentials from the email to force users to use SSO to login.

Yes, an 10-digit password will exist, but remember that WebClient logins are subject to blacklisting after 3 wrong attempts.

I accept that this is not what you want (although very close I think...), but I can't see the vulnerability.