As an extra security measure, people no longer automatically get an API token when their person record is created in the 4me. Going forward, an API token is generated for a person when he/she first clicks on the Reset API Token button to see it.
Furthermore, 4me now automatically deletes an API token for a person when this token has not been used for more than 365 days. Administrators and auditors can see how long ago it has been since someone last used his/her API token in the ‘API Last Activity’ column.