--- title: "5.3 Logging In Forgot Password" slug: "53-logging-in-forgot-password-1" updated: 2026-10-29T17:05:25Z published: 2026-10-29T17:05:25Z canonical: "wiki.cobblestonesoftware.com/53-logging-in-forgot-password-1" --- > ## Documentation Index > Fetch the complete documentation index at: https://wiki.cobblestonesoftware.com/llms.txt > Use this file to discover all available pages before exploring further. # 5.3 Logging In Forgot Password **COBBLESTONE SOFTWARE** Contract Insight — User Guide **5.3 Logging In Forgot Password** *Module: Vendor/Client Gateway › Step 5: Vendors/Clients on the Gateway › 5.3 Logging In Forgot Password* **Note:** Each procedure in this guide begins at the Contract Insight homepage, so any section can be followed on its own. Custom fields are configurable, so the exact field list on a contract category record may vary between environments. # 1. Overview **Sign-in** behavior for the Gateway is set on the VCG **Sign-in** tab's **VCG Login Method** dropdown (**Standard** or **Simplified**), with an optional second **Multifactor authentication for Gateway users** step layered on top when **Require a second step at sign-in** is turned on. A forgot-password flow sends a Password Reset email, whose subject and closing content are editable under Settings → Emails. # 2. Key Elements - VCG → **Sign-in** tab → **VCG Login Method** switches between **Standard** and **Simplified** login screens. - **Multifactor authentication for Gateway users**, when enabled, adds an emailed or texted verification code after the password. - **Password Reset Emails Title** and **Password Reset Emails Body End** (VCG Settings → Emails) control the reset email's subject and closing text. - **Show/Hide Login Captcha** (VCG Settings → General) adds a captcha challenge to the sign-in screen itself. - **VCG Password Reset Timeout Duration** (VCG Settings → General) sets how long a reset link stays valid, in minutes (default 20, maximum 1440). - Passwords can only be reset for **active** contact accounts (see 4.2 Activating a Company Contact Account). # 3. Navigating to the Vendor/Client Gateway Settings 1. From the Contract Insight homepage, click the **Administration** (settings) icon at the bottom of the left navigation bar. 2. In the **Search administration** box, type **Gateway**. 3. Click **Vendor/Client Gateway (VCG)**. ![Administration page with the Gateway search and Vendor/Client Gateway (VCG) tile highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-01-admin-search.jpg) The Vendor/Client Gateway (VCG) page opens on the **Settings** tab. Changes on this page are not applied until you click **Save changes**; click **Discard** to undo them. # 4. Configuring Gateway Sign-in ## 4a. Choosing the VCG Login Method 1. On the Vendor/Client Gateway (VCG) page, click the **Sign-in** tab. 2. Under **Gateway Login Method**, locate the **VCG Login Method** dropdown. ![VCG Sign-in tab with VCG Login Method, Multifactor authentication, and Save changes highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-02-signin-tab.jpg) 1. Open the **VCG Login Method** dropdown and select **Standard** or **Simplified**. 2. Click **Save changes**. ![VCG Login Method dropdown showing Simplified and Standard, with Give each a name of their own highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-03-login-method.jpg) **Note:** Simplified sign-in can't be switched on while two or more contacts share the same sign-in name. When this happens, the Sign-in tab lists the affected contacts, the name each **Would become**, and whether they **Will be emailed**. Click **Give each a name of their own** to rename them; each contact with an email address is emailed their new sign-in name. ## 4b. Requiring Multifactor Authentication 1. On the **Sign-in** tab, click **Multifactor authentication for Gateway users**. The Multifactor Authentication page opens with **Vendors & clients (Gateway)** selected. 2. Turn on **Require a second step at sign-in**. When this is off, nothing else on the page has any effect and people sign in with a password alone. 3. Under **How people are verified**, tick one or more methods: **Email a code**, **Text a code**, **Text, then email**, or **Email, then text**. Each method you tick is applied. 4. Optionally adjust **The verification code** settings (length and allowed characters). 5. Click **Save changes**. ![Multifactor Authentication page with Vendors & clients (Gateway), Require a second step at sign-in, verification methods, and Save changes highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-04-mfa.jpg) # 5. Configuring Password Reset Settings ## 5a. Customizing the Password Reset Email 1. On the Vendor/Client Gateway (VCG) page, click the **Settings** tab and scroll to the **Emails** section. 2. In **Password Reset Emails Title**, enter the subject line for the reset email. 3. Next to **Password Reset Emails Body End**, click **Edit content** to change the closing text of the email. 4. Click **Save changes** at the top of the page. ![Emails section with Password Reset Emails Body End and Password Reset Emails Title highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-05-password-reset-emails.jpg) ## 5b. Setting the Login Captcha and Reset Link Timeout 1. On the **Settings** tab, scroll to the **General** section. 2. Turn **Show/Hide Login Captcha** on to show a captcha on the Gateway sign-in screen. 3. In **VCG Password Reset Timeout Duration**, enter how many minutes a reset link stays valid (default 20, maximum 1440). 4. Click **Save changes** at the top of the page. ![General section with Gateway Website Address, Show/Hide Login Captcha, and VCG Password Reset Timeout Duration highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-06-general-captcha-timeout.jpg) **Tip:** The **Gateway Website Address** in the same section shows the URL vendors and clients use to reach the Gateway. It is set and maintained by the system. # 6. Logging In to the Gateway Vendors and clients sign in from the Gateway Website Address. 1. Enter your **Username**, **Password**, and **Company ID**. 2. Check **I have read and agree to the Terms and Conditions**. 3. Click **Sign In**. If multifactor authentication is required, enter the verification code sent to you to finish signing in. ![Gateway Sign In panel with Username, Password, Company ID, Forgot Password, Terms and Conditions, and Sign In highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-07-gateway-signin.jpg) # 7. Resetting a Forgotten Password 1. On the Gateway sign-in panel, click **Forgot Password?**. 2. On the **Reset Password** page, enter your **Username** and **Company ID**. 3. Click **Send Reset Link**. 4. Open the Password Reset email and follow the link to set a new password before it expires. ![Reset Password page with Username, Company ID, Please Note, and Send Reset Link highlighted](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/vcg-08-reset-password.jpg) **Note:** Passwords can only be reset for active accounts. Reset emails are time sensitive and expire after the **VCG Password Reset Timeout Duration** (20 minutes by default). If the link has expired, repeat these steps to send a new one. # 8. Quick Reference Summary | Task | How to Complete It | | --- | --- | | Open the Gateway settings | Administration → search **Gateway** → **Vendor/Client Gateway (VCG)**. | | Change the login method | VCG → **Sign-in** tab → **VCG Login Method** → Standard or Simplified → **Save changes**. | | Require multifactor authentication | VCG → **Sign-in** tab → **Multifactor authentication for Gateway users** → turn on **Require a second step at sign-in** → choose methods → **Save changes**. | | Edit the password reset email | VCG → **Settings** tab → **Emails** → **Password Reset Emails Title** / **Body End** → **Save changes**. | | Show a captcha on sign-in | VCG → **Settings** tab → **General** → **Show/Hide Login Captcha** → **Save changes**. | | Change how long reset links last | VCG → **Settings** tab → **General** → **VCG Password Reset Timeout Duration** → **Save changes**. | | Reset a forgotten password (vendor/client) | Gateway sign-in → **Forgot Password?** → enter Username and Company ID → **Send Reset Link**. |