111 results found

1. Add LaunchDarkly to allowedLibraries whitelist

   Hi,
   Out customer indicated they would like to unify the feature flags and feature experimentation software they use over multiple software applications, which also include software maintained by other partners next to ourselves.
   They already use LaunchDarkly for other software in their stack, and would also like to include their webshop build on Optimizely Configured Commerce to use LaunchDarkly for their feature flags and experimentations.
   Therefore we want to be able to include the following NuGet Package into the Extenstion project for this customer:
   https://www.nuget.org/packages/LaunchDarkly.ServerSdk
   At this moment the PowerShell script validateReferences.ps1 which uses the whitelist of packages in the file allowedLibraries.json is preventing us to include this package in our Extensions project.
   Based on the described Policy here:
   https://docs.developers.optimizely.com/configured-commerce/docs/third-party-library-policy
   We are now filing this request here, in the hope to get this approved.
   Kind regards,
   Kasper de Boer

   Hi,
   Out customer indicated they would like to unify the feature flags and feature experimentation software they use over multiple software applications, which also include software maintained by other partners next to ourselves.
   They already use LaunchDarkly for other software in their stack, and would also like to include their webshop build on Optimizely Configured Commerce to use LaunchDarkly for their feature flags and experimentations.
   Therefore we want to be able to include the following NuGet Package into the Extenstion project for this customer:
   https://www.nuget.org/packages/LaunchDarkly.ServerSdk
   At this moment the PowerShell script validateReferences.ps1 which uses the whitelist of packages in the… more

   25 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Website User 'Approver' shows GUID value, not readable ID/name

   Website Users>Details show GUID in 'Approver' field, however, export of users correctly shows ID/name of the 'Approver'. As an administrator of user accounts, I need ability to see 'Approver' ID/Name on the user Details page, instead of requiring export of all users to view the identity of the Approver.

   •  

   17 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  3 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Include information about errors on the email notification triggered by a failed integration job execution

   Currently when the execution of an integration job ends in failure, we get notified; however, the email itself says nothing about the reasons as to why the job failed, it only says "job failed".
   I'd like to suggest that the email notification should have more information to troubleshoot without having the users to go into the admin console. As a use case, some users that are on the distribution list that were notified may not even have admin console accounts, but probably need to be notified that an order was not integrated correctly into their ERP. Ideally, the notification could include the log entries of the job execution that have a type of "error" or "fatal". Otherwise, it should at least include a link so the users (that do have an admin console account could click on it and be automatically directed to the job logs of that Integration Job execution.

   Currently when the execution of an integration job ends in failure, we get notified; however, the email itself says nothing about the reasons as to why the job failed, it only says "job failed".
   I'd like to suggest that the email notification should have more information to troubleshoot without having the users to go into the admin console. As a use case, some users that are on the distribution list that were notified may not even have admin console accounts, but probably need to be notified that an order was not integrated correctly into their ERP. Ideally, the notification could… more

   15 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Add multi-tenant SSO support

   Currently only one connection to a single SSO tenant can be configured in the console admin. So if you have more than one customer that would like to use Windows SSO, you wouldn't be able to configure the system to allow all possible tenants. Please allow the system to use multiple tenants for SSO.

   12 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Manage/assign product badging by website

   We want to be able to assign badges by website.
   Example of use
   Website1 has product A on promotion -10%, but it's not on promotion on Website2. We want to display the badge only on Website1.

   11 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Assign a product badge to all products in a category

   We would like to assign a badge to all products in a specific category.
   Example of use
   All products in the Clearance category must have a badge to indicate that they are on final sale.
   If I'm browsing in category X and one of the products in this category is also in the Clearance category, I'll know that this product is on final sale because it will be identified by a badge.
   At the moment, if you add category rules to assign to badges in settings, they don't work. (See attached files

   11 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. MFA/2FA for Admin Console Access Across All Domains

   Hi Team,

   Referring to tickets #1676413, #1498526, #1492633 and #1721382 —

   The Brasseler client is looking to enable multi-factor authentication (MFA) specifically for the admin account. Could you please confirm if this is supported by Optimizely?

   We reviewed the documentation provided for Set up multi-factor authentication, but it appears to apply at the Opti ID level, whereas the client is specifically looking for MFA enforcement at the admin account level and at Admin site. This request has come from their internal security team.

   We would appreciate your guidance on this.

   Thanks for your support.

   11 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  2 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Multiple Customer Part Number

   Customers should be able to add multiple part numbers for a given product per customer in the admin console. Currently, it allows single part number for a given product per customer.
   In addition to this, few of our clients have the requirement to maintain the customer part number i.e. add, edit and delete by customer itself on the website under the My Account.

   9 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Cookie Policy + Compliance in Configured Commerce

   As privacy policy standards continue to evolve and become increasingly complex in different countries, such as the General Data Protection Regulation (GDPR for EU countries, as well as various state-specific regulations within the United States (e.g., California Consumer Privacy Act [CCPA] and Virginia Consumer Data Protection Act [CDPA], it is essential to address these requirements within the platform.
   To ensure compliance and meet the expectations of users, it is vital that the Configured Commerce product incorporates mechanisms to handle these complex privacy policy standards seamlessly. This would include the ability to:
   Clearly present and explain all base cookies utilized by the system, along with any associated analytics and tracking features.
   Provide an option for users to opt out of any optional analytics or tracking features included as part of the base platform.
   Offer extensibility for third-party integrations added by partners or clients during custom implementation efforts, allowing the inclusion of relevant information.
   I believe these enhancements will significantly improve the user experience, demonstrate a commitment to privacy compliance, and align Optimizely's Configured Commerce product with current industry standards.

   As privacy policy standards continue to evolve and become increasingly complex in different countries, such as the General Data Protection Regulation (GDPR for EU countries, as well as various state-specific regulations within the United States (e.g., California Consumer Privacy Act [CCPA] and Virginia Consumer Data Protection Act [CDPA], it is essential to address these requirements within the platform.
   To ensure compliance and meet the expectations of users, it is vital that the Configured Commerce product incorporates mechanisms to handle these complex privacy policy standards seamlessly. This would include the ability to:
   Clearly present and explain all base cookies utilized by… more

   8 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Currently we provide space via a pinned banner to allow customers to link to their appropriate privacy policy for additional details. This is for 'acceptance' only in that all cookies leveraged out of the box are considered first party functional cookies (https://support.optimizely.com/hc/en-us/articles/4413199721229-Cookies-in-Spire-CMS) for the website

   • The Accept button allows the pinned banner to disappear in acceptance of the policy
   • The other option is to 'close' the window, which is why it still displays if not 'accepted' on future pages/navigation of the user. This is not a 'reject' button out of the box today.

   
   

   Rejection of cookies or enhanced cookie management requires use of third party consent management system and is encouraged especially if additional cookies are leveraged or if changes are made to existing flows altering the functional first party cookie status of existing out of the box cookies.

   
   

   While looking into making existing cookies more configurable we found we do have customers who leverage consent management systems successfully. Often times these third-party integrations can be applied via the out of the box widget(s), and these integrations should be able to be applied via customization with implementation partners. If there are things blocking you from implementing consent management systems please let us know.

   
   

   We are open to continuing to hear feedback from customers and partners as to if there are specific things that we can offer from base that would help make these third party consent management integrations easier.

   Currently we provide space via a pinned banner to allow customers to link to their appropriate privacy policy for additional details. This is for 'acceptance' only in that all cookies leveraged out of the box are considered first party functional cookies (https://support.optimizely.com/hc/en-us/articles/4413199721229-Cookies-in-Spire-CMS) for the website

   • The Accept button allows the pinned banner to disappear in acceptance of the policy
   • The other option is to 'close' the window, which is why it still displays if not 'accepted' on future pages/navigation of the user. This is not a 'reject' button out of the box today.

   
   

   Rejection of cookies or enhanced cookie management requires use of third party consent management system and is encouraged especially if additional cookies are leveraged or if changes are made to existing flows altering the functional first party cookie status of existing out of the box cookies.

   
   

   While looking into making existing cookies more configurable we found we… more

10. Support slash in UrlPath translations

    We have a need to identify language in URLs.
    This resembles adding /fr to the URL path of our french pages in the URL Segment of the French homepage and the UrlRoot (i.e CatalogUrlRoot = fr/catalogue, ProductUrlRoot = fr/produit, Brand_UrlRoot = fr/marques
    Current setting does not support adding a slash (/ in the UrlPath translations, which is causing undesirable user experiences and language display issues.
    Benefits to adding this feature:
    SEO:
    Search engines (like Google can easily recognize language-specific content when it's separated by a path (i.e., /fr for French. This helps with international SEO, making it easier to index and rank pages in the relevant language markets.
    User Experience:
    Users can easily identify the page's language by looking at the URL, which enhances usability and makes navigation more predictable, especially on multilingual sites.
    If users share a link, the URL will immediately indicate the language, which is particularly helpful
    Simplifies site structure:
    A /fr structure keeps language variations in an organized hierarchy within the main domain, making it easier to manage language-specific content and maintain consistent tracking or analytics per language version.

    We have a need to identify language in URLs.
    This resembles adding /fr to the URL path of our french pages in the URL Segment of the French homepage and the UrlRoot (i.e CatalogUrlRoot = fr/catalogue, ProductUrlRoot = fr/produit, Brand_UrlRoot = fr/marques
    Current setting does not support adding a slash (/ in the UrlPath translations, which is causing undesirable user experiences and language display issues.
    Benefits to adding this feature:
    SEO:
    Search engines (like Google can easily recognize language-specific content when it's separated by a path (i.e., /fr for French. This helps with international SEO, making it easier… more

    7 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Better extensibility options for Search V2 Indexing

    We have a requirement on our project that requires us to change the behavior of the search indexing v2. In trying to do so, our development team ran into an issue where the class we needed to extend was not extensible (internal, sealed, or non overrideable methods).

    Basically what we are trying to do is remove the condition that excludes child products when fetching indexable products that is in line 896 of class Insite.Search.Shared.DocumentTypes.Product.Index.SearchV2.Models.Product (this is in version 5.2.2412.1705)

    What we would like to see changed is:

    1 - Make the SearchV2.Models.Product public instead of internal and remove the sealed keyword (and do the same for other classes in the SearchV2 and SearchV2.Models namespaces)

    2 - If possible, move the lines from 893 to 904 to a virtual method so we can override it - specifically this code:

    var indexableProducts = products
    .Except(inactiveStyleParents)
    .Where(p =>
    p.StyleParentId is null
    && (
    !p.IsDiscontinued
    || (productIdsWithQuantityOnHand.Contains(p.Id) && p.TrackInventory)
    )
    && p.IsActive
    && p.IndexStatus != 2
    )
    .ToArray();

    And it's not really just about this particular piece of code - in that class the entire ReadFromDatabase method has a lot of logic in it, is there any way to break some of that apart into virtual methods, or handler chains / pipelines and make it extensible?

    3 - Make the constructor of class Insite.Search.Shared.DocumentTypes.Product.Index.SearchIndexableProduct public instead of internal

    Without these extension points, we are currently forced to copy / paste a lot of classes from base code, and slightly modify a few of them, in order to achieve the desired functionality. Attached is a screenshot from our pull request showing all of the files we had to copy - the only ones we actually change are the ones highlighted in red.

    And again, this is not just about our specific requirement, but more of a request to open the entire Search V2 Indexing architecture to be more extensible. Right now it's pretty "locked down"

    We have a requirement on our project that requires us to change the behavior of the search indexing v2. In trying to do so, our development team ran into an issue where the class we needed to extend was not extensible (internal, sealed, or non overrideable methods).

    Basically what we are trying to do is remove the condition that excludes child products when fetching indexable products that is in line 896 of class Insite.Search.Shared.DocumentTypes.Product.Index.SearchV2.Models.Product (this is in version 5.2.2412.1705)

    What we would like to see changed is:

    1 - Make the SearchV2.Models.Product public instead of internal and remove the sealed… more

    •  

    7 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. PIM - Improvement to digital assets upload process

    Managing digital assets is one of the features of PIM. For entire catalog products, digital assets volume is very large.
    PIM only allows uploading digital assets through browser(confirmed with Optimizely #885640, which is not reliable for large volume of digital assets. We observed issues like digital assets duplicated and not uploaded in some cases. This approach also involves comparatively more efforts to upload digital assets.
    Please built automated approach for uploading digital assets to PIM.

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Multisite Support of Default Warehouse

    We have 2 companies. One in Canada and one in the US. Optimizely does not support having a warehouse in the US as the default for our US site and a Warehouse in Canada as the default for our Canadian Site. We do not ship accross the border.

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Integration of AI based Chatbot / Agent

    Configured Commerce has always focused on the value of its self-service capabilities to increase customer adoption, increase customer retention, and to free up Sales and Customer Service to focus on more complex, high-value engagements.
    Providing an AI based Chatbot/Agent aligns perfectly with this mission by providing the potential to accomplish things like:
    * Building on the natural language processing we're incorporating with our Google based search, users could, in a conversational manner, retrieve things like order information, product data, product recommendations, etc.
    * Streamline ordering and reordering. The Agent would potentially have access to past order data to simplify reordering as well as recommend products to be ordered. In addition, convert non-digital orders into digital orders, i.e. emails, PDFs, paper napkins, etc.
    There are a number of additional ways in which an AI Chatbot/Agent can simplify and streamline the customer experience on a B2B website, and make these processes more intuitive.

    Configured Commerce has always focused on the value of its self-service capabilities to increase customer adoption, increase customer retention, and to free up Sales and Customer Service to focus on more complex, high-value engagements.
    Providing an AI based Chatbot/Agent aligns perfectly with this mission by providing the potential to accomplish things like:
    * Building on the natural language processing we're incorporating with our Google based search, users could, in a conversational manner, retrieve things like order information, product data, product recommendations, etc.
    * Streamline ordering and reordering. The Agent would potentially have access to past order data to simplify reordering… more

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Improve logging

    Some clients have voiced their frustrations with finding it difficult to identify issues in the system. Please see the feedback below from one of the clients below.
    * The Elmah instructions are great information and could potentially be helpful. Unfortunately, the log file is so massive that I am not able to navigate it in any meaningful way. Unless I am mistaken there are not any ways to filter the data. I have attempted to download the csv file but the page never returns any results.
    * It would still be massively helpful if something like the datadog trace ID or the HTTP request ID was displayed on the customer-facing unhandled exception window so that we could tie it back to an error if the customer sends us a screenshot. The fact that there is ZERO information on that unhandled exception screen makes it completely useless.
    * I just had a customer complain that they couldn't submit an order due to unhandled exceptions. We impersonated them and were able to submit it fine. I see numerous errors in the logs that seem tagged with that customer's email address but I have no idea which one was causing their actual problem. Or if their real problem was even logged.
    * Another suggestion was to review the Spire logs but nothing there seems to pertain to this customer. The Spire logs have very limited details to attempt to determine what job the error came from.

    Some clients have voiced their frustrations with finding it difficult to identify issues in the system. Please see the feedback below from one of the clients below.
    * The Elmah instructions are great information and could potentially be helpful. Unfortunately, the log file is so massive that I am not able to navigate it in any meaningful way. Unless I am mistaken there are not any ways to filter the data. I have attempted to download the csv file but the page never returns any results.
    * It would still be massively helpful if something like the datadog trace ID… more

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Additional Brand Information

    Currently the PIM really only supports brand name. Enhance the product to be able to provide all the other brand information for commerce - such as assigning a Brand Asset (Image, Page Title, Meta Description, Featured Asset (Featured Brand Image, Description, Website URL, URL Segment, etc.
    It is quite limiting to have to go into Commerce and set all of these items as well as create it in PIM as a string/List.

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Abandoned Carts - email recipients and products in cart

    Is it possible to find out and export the list of recipients that Configured Commerce sends abandoned cart emails to as well as the products in their respective abandoned carts?
    When going through the email message logs we only see HTML code and we cannot seem to export the recipients and the products in the cart together.

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Request for an out of the box configuration setting for when sessions are fully expired

    Request for an out of the box configuration setting for when sessions are fully expired:

    • Session Expiration and let the client decide if they would like to redirect to Session Expired Page, or use Overlay with Session Expired Modal on same page.
    • In this setting we could also provide additional sub-setting with ability to enable a session expiration warning (admin can set the number of minutes)

    Incomplete Client-Side Inactivity Timeout: We have two different issues with this vulnerability,
    • If a customer steps away from their system without an automatic logout after a period of inactivity, there is a risk that others may access sensitive information. (They can’t take any action, however they can see all the information on that current page)
    • Customers believe they are still logged in while attempting to check out or submit orders, only to find themselves logged out unexpectedly. This can be frustrating for them.

    This issue was raised as a security vulnerability by security audit team and it’s also customer experience issue (they are not aware of session expiration). This is already in your tracker but it’s mentioned as “Working as Designed.” but it’s a security issue. Please consider this as a security fix.
    Incomplete Client-Side Inactivity Timeout Low When a user’s session expires, their active window is not redirected to a timeout or login page. Any information on the page remains exposed. Working as Designed. This is currently designed behavior on Storefront, any action on a website after session timeout will redirect user to SignIn page.

    Request for an out of the box configuration setting for when sessions are fully expired:

    • Session Expiration and let the client decide if they would like to redirect to Session Expired Page, or use Overlay with Session Expired Modal on same page.
    • In this setting we could also provide additional sub-setting with ability to enable a session expiration warning (admin can set the number of minutes)

    Incomplete Client-Side Inactivity Timeout: We have two different issues with this vulnerability,
    • If a customer steps away from their system without an automatic logout after a period of inactivity, there is… more

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  3 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Ability to force website users to sign in

    When Remember Me/Keep Me Signed In is enabled for the website, and the user selects the Remember Me/Keep Me Signed In option when signing into the Website, there is nothing that forces them to sign in again if their role has been changed. They can return to the website based on their cookies, even though their role has now been changed (example: from Buyer3 to Buyer1). As a result, they can place an order without approval.

    Please implement a function to force website users to sign in again when their role has been changed.

    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Pricing with promotion applied rounded to 2 decimals

    Our client wants to round the price with a promotion applied to 2 decimals, because the ERP was setup to allow only 2 decimals and they want all calculations with 2 decimals.
    For example, a customer ordered 101 EA with a price of 8.973 / EA. The total from Optimizely is 101 * 8.973 = 906.27. Even if in the screenshot you can see only 2 decimals (frontend, there are 3 when the calculation is done in backend.
    The ERP use the price 8.97, which means a total of 101 * 8.97 = 905.97. In this case, there are difference between Cart/Checkout/Order Confirmation and Order History.
    We would need the possibility to do all the calculations along the website using only 2 decimals.

    Our client wants to round the price with a promotion applied to 2 decimals, because the ERP was setup to allow only 2 decimals and they want all calculations with 2 decimals.
    For example, a customer ordered 101 EA with a price of 8.973 / EA. The total from Optimizely is 101 * 8.973 = 906.27. Even if in the screenshot you can see only 2 decimals (frontend, there are 3 when the calculation is done in backend.
    The ERP use the price 8.97, which means a total of 101 * 8.97 = 905.97. In this case, there are difference… more

    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating