Staff sign-in

[Product name] Language

Back

We'll email you a code to finish signing in.

You were signed out on this phoneYour session ended or was signed out from another device. Sign in again.

Set a screen lock firstStaff sign-in needs a screen lock on this phone (a passcode, PIN or pattern), so the app can lock itself.

No account? Ask your organisation's administrator for an invitation. Activation and password resets open on the web.

Use a different account

Check your email

We sent a 6-digit code to rina.santoso@insurance.test. It works for 5 minutes.

Didn't get it? That was the last resend. Start again for a new code.

This sign-in has ended

The code expired, or a wrong code was entered too many times. Start again for a new code.

Staff sign-in is web's sign-in (the staff web sign-in) in the app frame, opened from "Staff sign-in" under the Client sign-in; Back returns there. Signed out, the header holds the brand and the language pill. The app remembers which kind signed in last on this phone and opens on it.
POST /api/auth/sign-in {email, password, client: "mobile", deviceName, locale} answers only a challenge. deviceName is the phone's model name, such as "Pixel 8", the name web's devices list shows.
Errors are web's: IDENTITY_INVALID_CREDENTIALS marks both fields (an unknown email, a Pending Person and a wrong password look the same); IDENTITY_ACCOUNT_LOCKED counts down 15 minutes from retryAfter; IDENTITY_PERSON_SUSPENDED shows only after the password passes, and no code is sent; IDENTITY_CODE_NOT_SENT; RATE_LIMITED; no answer is "We couldn't connect…". Each is an alert at the top of the form.
A phone without a screen lock cannot sign in as staff: "Set a screen lock first" shows, Continue stays off and nothing is sent. Open settings opens the phone's security settings.
"Forgot password?" and the locked alert's "reset your password" open web's reset password in the browser; Activation and onboarding also stay on the web.
A failed refresh, or a Session signed out from web's devices list, lands here with "You were signed out on this phone".
The code: 6 digits, valid 5 minutes, 5 attempts; IDENTITY_CODE_INVALID counts the attempts left. Resend after 60 s, at most 3 times; IDENTITY_RESEND_TOO_SOON before that. The third resend says it was the last. IDENTITY_CHALLENGE_EXPIRED shows the ended card with Start again.
POST /api/auth/sign-in/code answers /me with accessToken, refreshToken and accessExpiresAt in the body, no cookie. Tokens live in expo-secure-store and go out as Authorization: Bearer: access 24 h, refresh 30 days idle. The API client refreshes once on a 401 and returns here when that fails.
A passed code lands on the last Organisation used, on the staff Claims tab, and saves the locale from /me.

Web's sign-in, newer than the mockup: web's copy and every state web/login.html draws (Email not valid, No connection, Resend too soon, Code with no resend left), with "Staff sign-in" as the heading, as the mockup's footer settled.
The code step's back is web's text link "Use a different account", and the first step's is a "Back" link to the Client sign-in, as the Client sign-in's own steps draw theirs; the mockup drew icon-only back buttons.
"Forgot password?" sits in the Password label row, as on web; the mockup put it under the field.
Rate limited shows main's RATE_LIMITED copy "Too many attempts. Wait a moment and try again.", as the Client sign-in does; the mockup's "Too many sign-in attempts from this network / Try again in 0:45." goes.
The alerts' icons are web's (danger for suspended and code not sent); the mockup used a lock and a mail.
"Wrong code. 3 attempts left." is web's sample; the mockup had 4.
No resend left says "That was the last resend. Start again for a new code.", the Client sign-in's line; web hides the resend line.
The no-account line keeps the mockup's "Activation and password resets open on the web." after web's sentence, since in the app both open the browser.
Sample: Rina Santoso, rina.santoso@insurance.test, the code 481920.

ticket #688 → comment: staff sign-in is web's two steps with web's copy and states (Email not valid, No connection, Resend too soon, the last resend) and "Staff sign-in" as the heading, in the app frame: the brand and the language pill in the header, Continue and Sign in in the footer, "Use a different account" as a back link.
ticket #688 → comment: RATE_LIMITED shows main's "Too many attempts. Wait a moment and try again."; the mockup's "Too many sign-in attempts from this network" copy goes.
ticket #688 → comment: the app's own states: "Set a screen lock first" with Continue off, and "You were signed out on this phone" after a failed refresh or a Session signed out from the web.

The app is drawn in a phone frame on a wide screen; at phone width the frame drops. (12 Oct 2026)
Signed in, the language lives in the Account tab; signed-out screens, this one included, keep the pill. (12 Oct 2026)
A refused submit is an alert at the top of the form plus the field's error; progress shows only on the clicked button. (12 Oct 2026)
Codes go by email only. (12 Oct 2026)

From staff-app.html (Staff sign-in: password and code, #628) and web/login.html; main's errorCode copy; #688