3rd party account creations or lost passwords (ex: Hobson Common Application)

["Plesco, Todd" <tplesco () CHAPMAN EDU>]

We're currently engaged in a discussion regarding 3rd party applications
are configured by default, after a student has created an account, to
send a follow-up email containing login credentials.

Do you allow (i.e. have guidance/policy/alternatives) for applications
which send login/password information to end users via e-mail?

 

Thanks

Todd A. Plesco  CISM, CBCP

Chapman University, Director of Information Security

One University Drive, Orange, CA 92866

Phone: (714) 744-7979/Fax: (714) 744-7041