eWeb allows for the forced logout and locking of an eWeb user’s account if they have reached a certain number of declined payment transactions limit within a specified time window. This functionality is currently implemented for the Make a donation form (logged-in user), Make a pledge form (logged-in user), Shopping Cart | Payment form, My Automatic Payments form, and Add/Edit Saved Payment Information form on eWeb.
The parameter such as number of failed payment transactions allowed, time duration limit, and defining an error message that will be displayed on the eWeb Login page when the eWeb user gets lock out can be configured and managed using the following system options as per your association's need.
- PaymentFailureLockoutEnabled
- PaymentFailureLockoutMaxNumberOfFailsAllowed
- PaymentFailureLockoutTimeWindow
- PaymentFailureLockoutErrorMessage
This functionality works for both Credit Cards and ACH payment options on both the Hosted and Non-Hosted payment gateways that can be accessed on eWeb for a payment transaction.
Note: The eWeb Payment Failure Lockout feature does not apply to Digital Wallets payment methods because the Digital Wallet Payment Provider (Apple Pay, Google Pay, and PayPal Express) handles credit card transaction validation at their end, and NetForum cannot capture declined payment transaction details that occurred when using the Digital Wallets payment option.
When the number of failed payment transaction attempts exceeds the limit set in the PaymentFailureLockoutMaxNumberOfFailsAllowed system option within the time window set in the PaymentFailureLockoutTimeWindow system option, the eWeb user will be redirected to the eWeb Login page and the system will display an error message that is defined in the PaymentFailureLockoutErrorMessage system option.
The system tracks payment declines due to incorrect entry of credit card number, CVV code, expiration date, invalid address, routing number, or account number for the failed payment attempts.
When the eWeb user attempts to login again to the eWeb site, the system will display the ‘The account is locked out. Please contact an administrator.’ message on the eWeb Login page.
The eWeb user will be required to contact the application administrator (iWeb user) to unlock the eWeb User’s account.
Unlocking the Locked Out eWeb User Account
To unlock the locked out eWeb user account:
1. Login to iWeb.
2. Go to the Individual profile (CRM module > Individual group item > Find or List Individuals group item link) of the eWeb user for whom you want to unlock the eWeb account.
3. On the Individual profile, click the Edit profile menu.
4. From the Edit menu, click the Web login info link. This will display Edit Web Login Information form.
5. Under the Access Information section, clear the Web Login Locked check box.
This will unlock the eWeb user’s account and allow access to the eWeb site again with their existing login credentials. Once the eWeb account gets unlocked, the eWeb user can successfully make a payment transaction and add/update a saved payment method on eWeb.