# 1. Login & Security

User Type: **Sponsor**
Source: *Mi Digital Academy - Education CRM Features Document*

---

## 1. Login & Security

### 1.1 Secure Login
**What it does:** Lets the sponsor representative sign in to the sponsor portal with email and password, with OTP verification and two-factor authentication. This is the entry point to all sponsor features.

**Sub-features:**
- Email + password login
- OTP verification on login
- Two-factor authentication (2FA)
- Password reset via email link
- Session timeout and auto-logout
- Secure Login available on web and mobile
- secure login event logging (viewed)
- Audit logging of secure login

**Sponsor User Journey:**
1. Sponsor navigates to Secure Login.
2. Sponsor reviews the secure login details shown.
3. Sponsor performs the primary action for secure login.
4. Sponsor confirms the result matches the documented behavior.
5. Sponsor opens Profile → "Activity" and confirms the events are recorded.

**Rules & Edge Cases:**
- Email + password login.
- OTP verification on login.
- Two-factor authentication (2FA).
- Password reset via email link.
- Session timeout and auto-logout.

### 1.2 Registration & Brand Verification
**What it does:** Lets a brand register a sponsor account, submit brand details and assets, and get verified by the platform before sponsoring. Only verified sponsors get branding placement.

**Sub-features:**
- Sponsor registration form (brand name, contact, industry)
- Brand asset upload (logo, brand guidelines)
- Platform brand verification and approval workflow
- Email verification of the sponsor contact
- Account status: pending, verified, suspended
- Registration & Brand Verification available on web and mobile
- registration & brand verification event logging (viewed)
- Audit logging of registration & brand verification

**Sponsor User Journey:**
1. Sponsor navigates to Registration & Brand Verification.
2. Sponsor reviews the registration & brand verification details shown.
3. Sponsor performs the primary action for registration & brand verification.
4. Sponsor confirms the result matches the documented behavior.
5. Sponsor opens Profile → "Activity" and confirms the events are recorded.

**Rules & Edge Cases:**
- Sponsor registration form (brand name, contact, industry).
- Brand asset upload (logo, brand guidelines).
- Platform brand verification and approval workflow.
- Email verification of the sponsor contact.
- Account status: pending, verified, suspended.