Skip to main content

FR-01.07 — Login

Trigger: A registered user attempts to sign in.

System shall:

  • Identify the user account.
  • Validate the supplied credentials.
  • Confirm that the account is allowed to authenticate.
  • Establish an authenticated session.
  • Associate the authenticated session with the correct user identity and role.

Acceptance Criteria:

  • PASS: An active user with valid credentials becomes authenticated.
  • PASS: Invalid credentials are rejected.
  • PASS: Suspended or deactivated accounts cannot authenticate.
  • FAIL: Incorrect credentials result in authenticated access.
  • FAIL: A suspended account can access protected functionality.