Geoff,
As for password retrieval, I like the email approach. However, one hospital we work with has very strict security in place. They don't like the idea of allowing just anyone to create an account, as they could with the Create Login Tab. This is the reason I posed the question.
I would prefer to leave things as they are. So, can you suggest a way to deal with this, preventing just anyone from having the ability to create an account?
As an aside, I did have this hospital test a version of an app with the create login tab but they had trouble with their account. They were able to create the account and set a password. However, when they tried to log in they received "Login Failed. Try Again." messages. They use an email address in the format FirstName.LastName@domain.org. Could this be the issue?
Thanks,
Jeff