AttendProWorkforce Documentation
Static docs Changelog
Login, recovery, and personal settings

Authentication And Account

Explains login, password reset, OTP, TOTP, account profile, password change, preferences, session history, and tenant signup forms in plain language.

LoginPassword resetOTPTOTPAccount
Workflow

Workflow

  1. LoginAll users: Signs a user into the system with an email address and password.
  2. Forgot and reset passwordsAll users: Let a user request a reset link and choose a new password after email verification.
  3. OTP and TOTP challengesUsers with MFA: Verify the user with a one-time code after the password is accepted.
  4. Account profile, password, and pr.Logged-in users: Lets users maintain their name, contact details, password, dashboard preferences, and.
Stage Actor Action Result
Login All users Signs a user into the system with an email address and password. The app validates the values, saves the record, and refreshes the relevant table or w.
Forgot and reset passwords All users Let a user request a reset link and choose a new password after email verification. The old password stops working and a security notification/audit entry is recorded.
OTP and TOTP challenges Users with MFA Verify the user with a one-time code after the password is accepted. The app validates the values, saves the record, and refreshes the relevant table or w.
Account profile, password, and pr. Logged-in users Lets users maintain their name, contact details, password, dashboard preferences, and. The app validates the values, saves the record, and refreshes the relevant table or w.
Login screenshot
The login page collects email, password, and remember-me choice.
OTP screenshot
OTP is used when the account requires an extra login challenge.
Security model
Authentication proves who the user is; roles decide what they can do.
Essential fields

Login form

All users

Signs a user into the system with an email address and password.

Essential field Plain meaning Example Required / notes
Email The login identity tied to the user account. admin@ovion.tech Required; must be a valid email.
Password The secret for that account. Demo@12345 Required; case-sensitive.
Remember me Keeps the user logged in longer on the same device. Checked Use only on trusted devices.
Essential fields

Forgot and reset password forms

All users

Let a user request a reset link and choose a new password after email verification.

Essential field Plain meaning Example Required / notes
Email Account that should receive the reset link. sara@ovion.tech Required.
Token Hidden reset code from the emailed link. auto-filled Do not edit manually.
New password Replacement login password. NewPass@123 Must pass password policy.
Confirm password Repeats the new password. NewPass@123 Must match exactly.
Essential fields

OTP and TOTP challenge forms

Users with MFA

Verify the user with a one-time code after the password is accepted.

Essential field Plain meaning Example Required / notes
OTP code Temporary code sent by email/SMS/WhatsApp. 123456 Expires based on OTP settings.
TOTP code Authenticator app code. 482901 Changes every short interval.
Recovery code Backup code for lost authenticator access. ABCD-EFGH One-time use.
Remember device Reduces repeated challenges if policy allows it. No Use cautiously.
Essential fields

Account profile, password, and preferences

Logged-in users

Lets users maintain their name, contact details, password, dashboard preferences, and session awareness.

Essential field Plain meaning Example Required / notes
Name Display name used in the app. Ali Ahmed Required for clear audit logs.
Email / phone Contact details for login and alerts. ali@ovion.tech / 03001230002 Must stay unique where enforced.
Current password Proof before changing password. old password Required for password change.
New password Replacement password. BetterPass@2026 Must match policy.
Essential fields

Tenant signup form

Public tenant owner

Creates a new organization workspace in SaaS/platform mode.

Essential field Plain meaning Example Required / notes
Organization name Company requesting a tenant. Karachi Retail Co Required.
Owner name Person who will administer the tenant. Nimra Iqbal Required.
Owner email First tenant admin login. owner@example.com Required and must be unique.
Tenant slug/domain Subdomain or workspace identifier. karachi-retail Must be URL safe.
Password Owner's first password if provided. Owner@12345 May be generated by the system.
Essential table

Session and account history table

Database listing

Shows recent login and account activity so users and admins can spot suspicious behavior.

Filters: Event type, User, Date, Status
Column What it means Where it comes from Example interpretation
Event What happened to the account. Activity/session log. login_success means someone signed in.
Device / IP Where the event came from. Request metadata. Unexpected IP should be reviewed.
Time When it happened. Log timestamp. A late-night login may need follow-up.
Status Whether it succeeded, failed, or was blocked. Auth service. blocked can indicate IP restriction or lockout.
Status Current workflow state for the row. The record status field or computed workflow state. Pending means someone still needs to act.
Created / Updated When the row entered or last changed in the system. Audit timestamps. Recent updates usually explain why the list order changed.
Available actions
  • Open or edit the record when permission allows it.
  • Filter the list without losing the current page context.
  • Use status badges to decide which item needs attention first.
Full field appendix

Main docs show essential fields only. Open Documentation Coverage for every detected source field, action, column, route hint, controller hint, and test hint.