FR-01 — Authentication, Identity & Access Management (IAM)
Purpose
FR-01 defines how SalesFam establishes user identity, verifies account ownership, completes onboarding, manages account status, and controls access to platform resources based on the user's assigned role.
Authenticated roles:
- Company: Authenticated merchant account.
- Sales Representative: Authenticated promoter account.
- SalesFam Admin: Authenticated platform operator.
Unauthenticated actor:
- Guest: Unauthenticated visitor with access only to public functionality.
FR-01 End-to-End Flow
The intended first-time user flow is:
Sub-requirements
| FR | Title |
|---|---|
| FR-01.01 | Account Registration |
| FR-01.02 | Account Verification |
| FR-01.03 | Verification Code Resend |
| FR-01.04 | Account-Type Selection During Onboarding |
| FR-01.05 | Company Onboarding |
| FR-01.06 | Sales Representative Onboarding |
| FR-01.07 | Login |
| FR-01.08 | Logout |
| FR-01.09 | Session Refresh |
| FR-01.10 | Forgot Password |
| FR-01.11 | Reset Password |
| FR-01.12 | Role-Based Access Control |
| FR-01.13 | Account Status Management |
Related design docs: Domain Model · Database Design · API Endpoints · Security · Architecture · Implementation Plan