# 1. Login & Security

User Type: **Organization**
Source: *Mi Digital Academy - Education CRM Features Document*

---

## 1. Login & Security

### 1.1 Secure Login
**What it does:** Lets organization admins sign in to the organization portal with email and password, with OTP verification and two-factor authentication. This is the entry point to all organization features.

**Sub-features:**
- Email + password login
- OTP verification on login
- Two-factor authentication (2FA)
- Password reset via email link
- Session timeout and auto-logout
- Secure Login available on web and mobile
- secure login event logging (viewed)
- Audit logging of secure login

**Organization User Journey:**
1. Organization navigates to Secure Login.
2. Organization reviews the secure login details shown.
3. Organization performs the primary action for secure login.
4. Organization confirms the result matches the documented behavior.
5. Organization opens Profile → "Activity" and confirms the events are recorded.

**Rules & Edge Cases:**
- Email + password login.
- OTP verification on login.
- Two-factor authentication (2FA).
- Password reset via email link.
- Session timeout and auto-logout.

### 1.2 Registration & Multi-Admin Setup
**What it does:** Lets an organization (NGO, government body, educational board) register, submit organization details, and set up multiple admins with distinct responsibilities before onboarding users.

**Sub-features:**
- Organization registration form (name, type, registration details)
- Organization type: NGO, government body, educational board
- Primary admin setup with verification
- Additional admin invitations with roles
- Account status: pending, verified, suspended
- Registration & Multi-Admin Setup available on web and mobile
- registration & multi-admin setup event logging (viewed)
- Audit logging of registration & multi-admin setup

**Organization User Journey:**
1. Organization navigates to Registration & Multi-Admin Setup.
2. Organization reviews the registration & multi-admin setup details shown.
3. Organization performs the primary action for registration & multi-admin setup.
4. Organization confirms the result matches the documented behavior.
5. Organization opens Profile → "Activity" and confirms the events are recorded.

**Rules & Edge Cases:**
- Organization registration form (name, type, registration details).
- Organization type: NGO, government body, educational board.
- Primary admin setup with verification.
- Additional admin invitations with roles.
- Account status: pending, verified, suspended.