Force Pin Code Reset

Hello, I’m working on an App that uses criminal justice information, and am trying to achieve CJIS compliance. Part of that compliance is authenticating users’ status as still being members of law enforcement agencies. The easiest way I’ve seen this done is by limiting access to specific domains, their work email addresses. I would need to, every 6 months or so, force the users to retrieve another PIN code from their email. If a user is no longer a member of that agency, they can’t access their email for the PIN code and lose access to the app. Is there anyway to force a PIN code retrieval?

Hi there,

What I understand is that you can’t force your Glide App to send PIN to your users email by any means. Glide will only send email when your users access your app for the first time. But:

  • IF somehow your users is blocking cookies on their browser, there is a high chance the app will keep asking for PIN every time the page closed.
  • Referring to David in on one of the thread, if your users are opening Glide through another app (i.e., Facebook / Instagram), the login setting might not save.

Considering that you have a specific need to make sure that every 6 months there would be a “New Validation for User”, here is what I thought would be visible to develop in Glide:

Start with Data Tab:

  1. First, Add a new column in User Table called “Joined Date”
  2. Second, Create a Computed Date Difference Column where you subtract today’s date from joined date
  3. Third, Create a If-Then-Else column where you check whether the result of Computed Date Difference Column is > 60 Days, returns TRUE

Move to Layout Tab:

  1. Set the visibility of all of your pages to “Show Tab when If-Then-Else column <> TRUE”
  2. Therefore, when there is a user that accessing your app and the and time of joining is greater than 60 Days, they couldn’t access your app.
  3. Understand it will be painful if the user can’t access anything on your app, you can setup a dedicated page where only users that “Time of joining is greater than 60 days” can access it, and you can setup action button where it directly sends you an email that the particular user need an access and you can re-validate it.

Hope this will help :slightly_smiling_face:

You could disable the cookies under settings… then you would need a pin each time they login.

Another approach (which is pretty hacky) could be to duplicate the app and reconfigure the custom domain….same domain but new app means everyone has to sign back in.

The issue with visibility conditions is the data would still be there for someone who is motivated/ knows how to get it.

1 Like

I think this would work, thank you very much!!

  • John
1 Like

Hey Eric,

Thanks for the reply. I’m sure this would work for most but have to be careful of the sneaky savvy ones lol. The above response with revalidating people after certain periods of time I think should work. Thank you for your time!

  • John
1 Like