We are striving to provide the best user experience and maximum security to our clients which means that from time to time we are making bigger changes and upgrades to our services.

This time we would like to give you an advance notification about upcoming changes to authentication in Duco and to the dashboards experience which are planned within the next couple of months.

Dashboards

We are excited to announce the launch of the new dashboards experience in Duco, which means the old dashboards and the global exceptions page will be gradually replaced. 

The main benefits the changes bring are:

• Time Savings: Streamlined dashboard creation with the new interface.
• Improved Control: Manage permissions for data access more effectively.
• Better Insights: Access more relevant and customized data.
• Efficiency: Resolve exceptions faster with actionable, real-time information.

As we are working to expand and mature our dashboards capabilities, we would like to hear from you and learn what reports are important for you! Please book time with our Product managers directly using this link.

Read on to learn what is changing and what you’ll need to do.

Phase 1. The old dashboards become view-only. 

As of this April release, you will no longer be able to configure or create dashboards in the old format.

We encourage you to start replacing the old dashboard gadgets and the global exceptions page with new ones using the new Dashboard Creator. 

We suggest the following approach per gadget:

• Current unmatched and partially matched

Create an exceptions dashboard using the new Creator and pick a list of processes you would like to keep track of. We will be showing you counts of all open exceptions, with drill-down capabilities. The created dashboard can then be saved and shared.

You can create as many dashboards with various sets of processes as needed.

• Historical unmatched and partially matched

We have seen a very limited use of this gadget. As we continue to improve the dashboards and strive to tailor them to the best practices across all our clients, please let us know if you would like to have similar statistics.

• Processes

Our updated processes page allows you to track the latest status of the process. Use the ‘star’ feature to pick the list of those you are most interested in. 

Please note that at the moment there is no possibility to create multiple groups of processes to track the status, however we are actively looking into this option. Please share your feedback with your Customer Success Manager or book time with our Product team. We will be glad to learn more about your needs.

• Statistics 

We have seen a very limited use of this gadget. We are working on an improved version of the statistics overview and will keep you updated. If you have been relying on this gadget, please let your Customer Success Manager know or get in touch with our Product team.

• Current submission volumes, historical submission volumes

This gadget will be replaced with the Volumes dashboard. 

Using the Dashboard Creator you will be able to choose the Volume dashboard template and select a number of processes that you would like to keep track of for the dashboard. 

In case if you don’t pick any processes, the dashboard will be showing you the general volume statistics for your environment. Learn more details in this Help Centre article.

In addition to the processed and chargeable volume you will be able to see the breakdown of these numbers by process type. We have also added a number of processes that are created in your environment.

We are working on expanding the timelines for the historic volumes and adding contractual limits. If you would like to check this information while we are still working on adding it to your dashboards, please contact your Customer Success Manager.

• Global exceptions page 

The current page displays workflow items across all processes and provides a count of all exceptions per status. 

We have introduced the Exceptions Management dashboard that replaces this view.

Similar as for the Volumes dashboard, you will be able to add Exceptions Management dashboard using the Dashboard Creator and choose the processes you would like to keep track of.

We have preconfigured 4 overview gadgets for you: 

• Top 10 processes by number of open exceptions (from those chosen ones)
• Top 10 groups by number of open assigned exceptions (from the chosen processes)
• Total number of exceptions per age bucket (from the chosen processes)
• Total number of exceptions per workflow status (from the chosen processes)

You will be able to drill-down into many of these charts to see a detailed list of processes and to easily navigate to the individual process page with filtered exceptions by clicking on the number of exceptions.

We are also introducing the process-level filtering, allowing you to further refine your views. 

 

Visibility of processes on the charts and access to exceptions is controlled by your process permissions. Please consult the Dashboard Creator article to learn more.

We are working further on expanding the functionality of our dashboards and will be keeping you up to date in our regular release notes.

Phase 2. The old dashboards and global exceptions page are removed. 

The full removal of the old dashboards and the global exceptions page is planned for the June 2025 release. 

If you require any help with the above or if you have any improvement suggestions, please reach out to your Duco Customer Success Manager or book time with our Product managers directly using this link.

Authentication changes

We're implementing a significant upgrade to our user authentication system between June and July 2025, bringing you modernised authentication mechanisms, and advanced security. 

This upgrade aligns with best practices from leading security organisations like the UK NCSC, US NIST, and US Centre for Internet Security, and reflects our core security values.

We expect a seamless transition for the majority of users with minimal impact on the login experience.

To ensure a smooth rollout, the changes will be implemented in two phases. We'll send you further reminders and detailed information as we approach each phase to keep you fully informed.

Please note that the changes described below are not applicable to you if your company is using the Single Sign-On to log into Duco.

Phase 1 - Enhanced Login Security: Introducing Failed Login Throttling

Currently, our system locks users out after three incorrect password attempts, requiring administrator intervention to unlock their accounts. We're enhancing our login security with a new failed login throttling mechanism:

• Current Behaviour: User lockout after 3 failed login attempts requires administrator unlock.
• New Behaviour:
  • After five failed login attempts, users will experience a delay before they can try again.
  • The delay will increase with each failed attempt: 1 second, 2 seconds, 4 seconds, 8 seconds, etc., up to a maximum of 15 minutes.
  • After the delay, users can try to log in again or reset their password.

This new approach will significantly reduce the risk of brute-force password attacks, making the system more secure while minimising the need for administrator intervention.

Phase 2 - Changes to Password Complexity rules

We are simplifying our password requirements to focus on password length rather than forced complexity.

Key Changes:

• Password special characters: We will no longer require complex password rules (like including uppercase, lowercase, or special characters).
• Password length: The default minimum password length will be set to 15 characters.

Longer passwords are statistically more secure than shorter, complex passwords. This change will make passwords easier to remember and manage, while simultaneously enhancing security.

We encourage you to change your password to 15 characters. 

Upgrade Schedule and actions

Phase 1: Failed Login Throttling Implementation

• Impact: No impact for successful logins. Failed logins will begin to be throttled.
• Your Action: No action is required.

Your current password rules will remain in place. There will be no change to your login process. 

Phase 2: Password Policy Update (approximately 1 month after Phase 1)

• Impact: This change will implement the new password policy, removing the complexity requirements and will require password lengths of 15 characters or more.
• Your Action: We recommend to update your password to meet the new length recommendations (at least 15 characters). 

We believe these changes will significantly improve the security and usability of Duco. We will provide further updates and support as we approach each phase of the implementation.