We released a number of new security features last night that give your school's Populi users new ways to keep their accounts protected. Here's a look at what's new:

Login approvals

Login approvals send you a text message with a one-time use passcode whenever you log in to Populi on a new browser or device. In addition to your username and password, you enter the passcode to log in. Populi then recognizes your account as approved for use on that browser or device, and there's no further need for the additional passcode for future logins.

This protects your account by requiring you to have your mobile phone with you when you log in. Typically, the person with your phone is gonna be you—and when you enter the passcode, you're assuring Populi that the person logging in is you, and not someone else. So, even if your login is compromised—someone gets ahold of your password, say—it's useless without the passcode sent to your phone.

Account security

Account administrators can now manage all kinds of high-level security settings for your school's Populi account in the new Account > Security view. We've moved some old, familiar settings there (ID photos, who can view SSN's, et. al.), and have added a few new ones. Most important is Login Approvals, where the Account Admin can allow or require various user roles to use login approvals for their Populi user logins. For example, you might allow all users to use them, but you require it of Academic Admin, Financial Admin, and Financial Aid users.

Since login approvals require that the user have a verified text notification number, if any affected users do not have a number, they'll immediately receive an email that lets them set one up. You can also look at individual role pages to see who has a verified number and who doesn't.

User access updates

We moved the user access controls out of the Profile > Info view and stuck it next to the new menu button. Besides making it easier to see at a glance whether someone is a user, it also gives you a few new options related to login approvals. The user dialog now lets you require or disable login approvals for individual users. You can also send the user a link to reset his text number (which works just like the reset-password email).

Devices

Every user now has a new Security view in their personal account settings. Security includes reset-password fields, a chunk for setting up a text notification number, and a new Devices section that lets you view and manage your approved devices—browsers and devices on which you've logged in.

You can even set a device to trusted. On trusted devices, once you've logged in, you can stay logged in. To trust a device, you verify that it's password-protected, accessible only to you, etc. Afterwords, you're logged in on that device until you log out or an account admin changes a login approval setting.

Set it up!

The new security features will go a long way towards helping secure your school's data. We strongly encourage your school's account administrators to enable login approvals. Account administrators can read more about the new security features and Populi users can learn about their new personal security settings in the Populi Knowledge Base.

After releasing transcript requests a few weeks ago, we heard a lot of good ideas from our customers about how we could round out the feature. So last night we released a bunch of handy upgrades to official transcript requests:

• Students who aren't in Populi (say, a 1960's-era alum whose transcript has to be mimeographed) can now request and pay for an official transcript. You can fulfill the request outside Populi, but then keep a record of the request and its completion—even if the student himself isn't in Populi at all.
• Custom delivery methods let you handle "rush" requests. Just create a delivery method and tie it to a fee rule—and now you can properly charge for that transcript the student needs to be overnighted to Stockholm University.
• Web transcripts are now disabled when the student has a grade/transcript or financial lock. There's also an access counter in the export history so you can see how many times they've been downloaded.
• The request detail page now shows you any locks and outstanding financial balances that might make you want to not complete the request. It also has a new cancel/refund function for credit card charges.
• You can embed the request form within another web page and use custom CSS to make it match.
• A new academic setting lets you customize the email that's sent when a transcript request is fulfilled.

Get all the details in the Populi Knowledge Base!

After announcing transcript requests about a month ago, we quickly realized that we needed the feature to do a better job handling requests from former students and others who don't have a Populi login. So, when the feature is released tonight (October 11), it will include a public-facing form that lets people submit official transcript requests.

Here's how it works:

1. In Transcript Requests > Settings, you enable the public transcript request form.
2. You can then link to it from your website or pass the URL along to your former students who need an official transcript.
3. The requester goes to the form and enters her last name, SSN or SIN , and date of birth. Populi uses this information to match the requester to one of your student records (we can't have Jane Smith ordering a transcript for the other Jane Smith, now can we?).
4. Once matched with a student record, the requester enters the request details (recipient, etc.) and pays for it by credit card (depending, of course, on your payment settings).
5. The request enters the queue in Academics > Transcript Requests, where you can review it and fulfill it.

To learn all there is to know about Transcript Requests, have a look at the Populi Knowledge Base!

Arrivederci, action gear

With this release we're also loading the Profile's gear onto the funeral pyre and putting a lit torch to it. In its stead: a new menu icon, together with context-specific actions links.

What this means:

• The action gear  is gone! Here's the new menu icon, located just above where the gear used to live: 
• The menu icon contains everything the gear used to give you on Profile > Info: Export ID Card, Reset Password, etc.
• The context-specific actions formerly contained in the gear have moved into the individual views in the Profile. So, you'll see Record Payment and Print Statement (etc.) in Profile > Financial > Dashboard. You'll see Export Schedule, etc. in Profile > Student. And so on.

We fully appreciate that everyone clicks the gear a zillion times a day, and us changing a much-used feature will initially be very annoying. We understand! That said, the new design makes the previously-hidden actions easier to find, and the menu icon now consistently shows you the same group of actions wherever you are on the profile. It's more consistent and makes more sense than the old layout, and it clears the way for us to make additional improvements on the Profile.

A few other behind-the-scenes improvements will go out with this release, which we'll describe in our Release Notes this Friday (have you subscribed to those yet?). Of course, if you have any comments or questions about the updates, we're eager to hear from you.

Coming soon: official transcript requests! While our crack coders apply the finishing graces to them, we thought we'd give you a preview of the upcoming features.

Your students will soon be able to request an official transcript right from their Profiles. Their requests will be queued up in the new Transcript Requests view in Academics; from there you can review and fulfill them with a few quick steps. Here's the whole story:

1. Setup

First you'll configure a few transcript request settings.

• Delivery methods include print/mail and email. You can offer one or the other—or both.
• Do you charge for transcript requests? You'll choose a fee and optionally set up fee rules to cover particular kinds of requests—for example, you charge one amount for a printed transcript, and another for an emailed one. You'll also have the option to not charge.
• Charge for requests either by charge-to-account or by having your students cough up a credit card number upfront.
• In general academic settings, you can enable web transcripts (more below).

2. Students submit requests

After you've enabled official transcript requests, a student will go to his Profile > Student view. From the new Transcript Actions button, he'll select Request Official Transcript. After entering information about the recipient and handling your payment arrangements, he'll submit it.

3. You fulfill the request

You'll find all of your students' requests on the new Transcript Requests view. To fulfill a request, you'll go to the request's info page. There, you'll choose a layout for the transcript, preview the document, and take care of the delivery details—emailing the web transcript link or printing a mailing label for a paper copy.

Web transcripts and a few interface updates

A few new items accompany transcript requests. The aforementioned web transcripts create a unique URL from which an up-to-date PDF transcript can be downloaded. This is handy for when you email a transcript link in March while the student's Spring courses are still in-progress—come June, after they're all finalized, the transcript recipient can just visit the URL to see how the student fared that semester. Once you enable web transcripts, every transcript you export will contain its own unique URL in the footer.

We've also placed the utilities gear onto the funeral pyre. We'll replace it with action links and the new Transcript Actions button; the gear on the Profile > Info view shall meet a similar fate.

We're pretty excited to get Transcript Requests out to all our customers. They'll replace some pricey standalone transcript request services some schools are using. And as with all new Populi features, they won't require any software integrations or other wiring-together. Just set 'em up and let 'em rip.

Update: This article was published back in 2016 and some of the pricing details may be out of date by the time you read it. For complete pricing details for Stripe, we refer you to their own pricing page!

Populi recently participated in a beta version of Stripe.com’s ACH product which allows many of our colleges* to easily accept tuition payments and donations at a much lower rate (0.5% + 25¢) than credit cards (2.9% + 30¢).

Stripe recently brought their ACH features out of beta and published new pricing. So, as of August 1st, 2016, we’re pleased to announce a major rate decrease for larger transactions! The new rate is 0.8%, with a 25¢ minimum transaction fee and a $5 maximum transaction fee.

For small transactions this new rate may be slightly higher, but for larger transactions it’s a huge cost savings. For example, for a $5,000 tuition payment:

Old rate:
$5,000 * 0.5% + 25¢ = $25.25

New rate:
$5,000 * 0.8%, with a 25¢ minimum and $5 maximum = $5

Either rate represents a substantial savings compared to credit cards (accepting a $5,000 credit card payment via Stripe would cost your school $145.25), but in this example your college would now pay one fifth of the old ACH rate!

We’re confident this price change will allow more of our clients to benefit from the convenience of accepting online payments and donations, without the substantial fees associated with credit card transactions.

*Because of regulations regarding the ACH network we’re not able to offer this service to all colleges; typically only to established, accredited colleges. Please contact support to see if your college qualifies.

New in Populi: localization. Localization lets you translate the various interface elements—text, buttons, links, and so on—so your non-English-speaking users can access Populi in their own language. Here's how it works:

1. Go to the new Localization view in Account

Your school's Populi account administrator goes to the new Localization view in Account > Account Settings. He'll name the localization and select the language to which Populi will default for untranslated words. Finally, he'll choose a flag to go along with the translation.

2. Start translating

The translation section is straightforward: find the base text on the left, enter translations on the right. You can translate Interface Text (every field, button, column heading—everything that we've given a name to) as well as your own text (application field names, tuition schedules, and so on). As you translate, Populi saves your entries automatically.

3. Continue translating

I'm not gonna lie to you: it's gonna take awhile! There are around half a zillion named things in Populi, and the developers are adding more all the time. If need be, you can just translate certain areas of Populi—for example, translate courses and financial info so foreign students can take classes and pay their bills.

4. Assign locales

Once a localization is completed (or complete enough for your needs), you can set up individual users so that they'll see the translated version of Populi when they log in. All you need to do is click the flag icon below a person's profile photo, select the locale, and click ye olde Save button (you can do this for yourself, too!). The localization will take effect immediately.

We're really pleased to get this out to all of our customers. Many schools have been using Populi to serve international students—conducting courses in German, for example, or setting up applications in Portuguese. Localization lets you complete the experience for your non-English speaking users.

One caveat: worldly and seasoned as we are, we remain unrepentant English-speakers here (a few of us know a little Latin and Greek), and new development will remain in English. So, when we develop new features or heavily rewrite existing ones, you'll need to update your translations. Likewise, we'll also conduct customer support in English and we'll have to assume you're asking about Populi as we wrote it (not as you may have translated it). If you've translated every instance of the phrase "Academic Term" to "Melon Baller", understand that we probably won't know what you're talking about when you write in with a problem on the Melon Baller report.

That said, we look forward to seeing what you'll do with localization!