Access and Onboarding¶
Landing and Sign-In¶
The landing page is the public entry point for company users.
Primary actions:
- Sign In for existing users
- Get Started to open company registration
Registration¶
Company registration is handled in the portal registration flow, not Keycloak default registration.
Registration captures:
- contact person details
- company identity and regulatory identifiers
- address details
- required KYC/registration documents
- final review and terms acceptance
Authentication Behavior¶
- portal uses Keycloak SSO for authentication
- callback parameters are handled on return from auth provider
- token refresh runs in background for active sessions
- password login and registered passkey login both return users to the company workspace
- if SSO account lacks
company-portalaccess, user is forced to re-login with correct account
Onboarding-Limited Mode¶
Some companies operate in onboarding mode until activation milestones are complete.
In this mode, available routes are intentionally limited to onboarding-safe modules, such as:
- onboarding dashboard
- profile
- certifications
- messages
- support
Access Troubleshooting¶
| Symptom | Likely cause | Action |
|---|---|---|
| redirected to forbidden | user role missing for target route | sign in with role-permitted user or request role update |
| module missing from sidebar | role-gated nav visibility | verify role assignment in company user management |
| registration stuck on doc step | required KYC documents missing | upload all mandatory documents and retry |
| passkey option unavailable | no passkey registered or browser/device unsupported | register a passkey from profile security and retry on a supported device |