User Account

The user account functions as the customer dashboard. Customers can:

• view past orders
• view their registered shipping addresses
• access their Carlstar partnership related documents
• change password and manage their two-factor authentication (2FA) settings
• request the deletion of their account

Orders

The Orders section allows customers to access their order history. If the Carlstar partner company have more B2B users, meaning there are more users with the same CustomerNo, than this list contains orders from all users with that shared CustomerNo.

Shipping Addresses

The Addresses section lists the shipping address(es) registered with the users CustomerNo.

The address is not user editable, it is retrieved from the Carlstar ERP.

• Upon the very first login the addresses are retried via API.
• There is also a regular, scheduled address synchronization that updates the address list of all users accounts.

Note

Right now this scheduled update process is run by the B2B site and not initiated by the ERP. This means that if a shipping address changed, added or deleted in the Navision ERP it’s not instantly visible in the B2B site account page. If in the future this become a requirement than the Navision ERP should initiate an address update API call. This was not a requirement and not implemented neither at the ERP nor at the B2B site.

Documentation

The Documentation section lists all the documents that were uploaded to the site for CustomerNo of the logged-in user.

Password management

The Change Password section shows the form for the password change action.

Security

Configured as non-mandatory, however the site provides the possibility to strengthen the user account security via two-factor authentication (2FA).

The 2FA is provided by the Wordfence security plugin and works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy.

Account Delete request

In this section the customer can request the deletion of the user account. After the request is sent the user account is disabled meaning the user can’t log in anymore. The account is not deleted at this point, that can initiated by the responsible Carlstar team from the Navision ERP that will delete the WordPress account via an API call.