Secure Lead Form Component

Configuring a Secure Form

PLEASE NOTE: Only Dealer Administrators can configure password protection for secure forms. Please see Secure Forms: Password Protecting "Customer Sensitive" Form Fields

1. In the ARI CMS, go to Account. Find the applicable website in the Sites list and select Components.
2. Scroll down to the instance of the Secure Lead Form Component that you wish to configure. Click on the gear icon.
3. Apply a Page Rule, to specify on which page (or pages) the form will display.
4. Apply a Section Rule of Main Content, unless the form is intended to reside in another section. If that is the case, choose the section where the form should display.
5. Under Component Settings, users have the ability to configure the following items:
   1. Form: The user selects the form that will display on a secure page on storefront.
      1. Default Forms: To select a system form, ensure that the green button below the “Form” label says Default Forms. Then click into the form field to select from one of the available options.
      2. Custom Forms:  To select a custom form, ensure that the green button below the “Form” label says Custom Forms. Then click into the form field to select from one of the available options.
6. Customize Form Title: This adds a custom title at the top of your form on storefront.
7. Form Message: This adds a custom message to the top of your form on storefront.
8. Submit Button Text: This field replaces the form button text of “Submit” with a custom value (Example: “Apply Now”, “Go”, etc.)
9. Render privacy policy (Checkbox): When selected, a link to the website privacy policy page is added to the form.
10. Wrap form in border (Checkbox): When selected, the form is wrapped in a border on storefront.
11. Form Width: This menu gives users three pre-set options for determining how wide the form should display on the secure web page. Options are Narrow, Medium and Full.
12. Form Alignment: This menu gives users three pre-set options for determining how the form is aligned on the secure web page. Options are Left, Center, and Right.
13. Global Lead Forms Settings (Not shown in image example): These options are applied to ALL of the forms on your website. Changing them in one component will update them in all other form components.
    1. Send automatic email reply to customer: When enabled, an auto-reply email is sent to the user who submits the form (provided that they have entered their email address into the form).
    2. Show "Receive Offers" checkbox: This adds a “Receive Offers” opt-in checkbox to all site forms. On storefront, when Receive Offers displays it is unchecked by default. This feature cannot be configured to function as an “opt-out” (ie. making the checkbox checked by default).
14. Click Save Settings and Publish Changes.

Secure Lead Component - ARI Internal View

Secure Forms: Password Protecting "Customer Sensitive" Form Fields

IMPORTANT: If a form has custom fields (ie any field that is not part of an equivalent system form) to capture sensitive customer information (SSN, Driver’s License ID, etc.), these fields WILL NOT be viewable in corresponding lead records in the ARI CMS unless and until someone in the role of Dealer Administrator configures a password in the Secure Lead Form Component settings. This requirement is in place to protect dealers and consumers from security breaches.

Without a password being applied, non-custom form fields in the lead record will display to users, but custom fields will be hidden. Additionally, custom fields are permanently inaccessible on lead records captured prior to a password being configured for the form. In short, it’s very important to add a password as close to the deployment of the form as possible, so that captured customer information isn’t irretrievably lost.

It is not possible for an ARI employee to configure the password settings on a secure form. For security purposes, only users in the role of Dealer Administrator can manage the password settings for the component.

Activating Password Access on Customer Sensitive Fields

1. 1. In the ARI CMS, go to Account. Find the applicable website in the Sites list and select Components.
   2. Scroll down to the instance of the Secure Lead Form Component that you wish to configure. Click on the gear icon.
   3. Under Component Settings, scroll to the following form fields:
      1. Secure Password: Enter a password (minimum of 6 characters)
      2. Confirm Password: Re-enter the password
      3. Show Password: This merely decrypts the password in the browser view, so that a user can visually verify that they have entered the password as intended.
      4. Click Save Settings and Publish Changes. 

Change Password - Secure Lead Form Component

If a Dealer Administrator wishes to change the password on the Secure Lead Form Component, they must know the current password. To change the password when the current password has been forgotten, please see Secure Leads: Forgotten Password.

1. 1. In the ARI CMS, go to Account. Find the applicable website in the Sites list and select Components.
   2. Scroll down to the instance of the Secure Lead Form Component that you wish to configure. Click on the gear icon.
   3. Under Component Settings, scroll to Password Set.
   4. Click the Change Password button.
   5. Enter the existing password in the field labeled Current Password
   6. In the Secure Password field, enter a password (minimum of 6 characters)
   7. Re-enter the password in the Confirm Password field
   8. Click Save Settings and Publish Changes.

Forgot Password - Secure Lead Form Component

If a Dealer Administrator has forgotten their password on the Secure Lead Form Component, they can create a new one. No other dealer role or ARI role has access to the “Forgot Password” function.

IMPORTANT: When a password is changed via the Forgot Password process, all previously captured custom fields for that form are permanently purged from the lead records. This is a security measure that cannot be bypassed by design.

1. 1. In the ARI CMS, go to Account. Find the applicable website in the Sites list and select Components.
   2. Scroll down to the instance of the Secure Lead Form Component that you wish to configure. Click on the gear icon.
   3. Under Component Settings, scroll to Password Set.
   4. Click the Forgot Password button. This generates a link and sends it to the email account for the Dealer Administrator.
   5. Clicking the emailed link will bring the user to a screen where they can enter and confirm a new password.
   6. In the Secure Password field, enter a password (minimum of 6 characters)
   7. Re-enter the password in the Confirm Password field
   8. Click Save Settings. 

Secure Lead Component - Dealer Administrator View

Accessing Password Protected Lead Records

If someone in the user role of Dealer Administrator has set a password on the Secure Lead Form Component, then any form submissions that are captured in the ARI CMS system can only be accessed when that password is entered in the lead record.

It’s important to note that not all form data is encrypted on password-protected forms. Basic information, like the customer’s name, telephone, and email address, will display in lead records without inputting a password. But any custom fields in the lead record, including fields meant to capture “customer-sensitive” information, WILL NOT display UNLESS the password for the form is entered.

1. In the ARI CMS navigation menu, go to Leads > Leads
2. Find the password-protected lead record that you wish to access and select “View”. You may use the refinement filters at the top of the page to help find the correct record.
3. On the Lead Detail page, you should see a blue Decrypt button on the upper right side of the page. Click Decrypt.

4. A Decryption Password modal window will open. Enter the form password and click Submit.

5. If the password entered is correct, you’ll be returned to lead detail page and the previously encrypted form fields will now display.

NOTE: In order to access encrypted form data, the form password must be entered each time you open the lead record. If you have more than one password-protected lead record to view, you will have to re-enter the password for each individual record.