Sign in · Prototype

[Product name]

Language

Sign in

We'll email you a code to finish signing in.

Email or password is incorrect.

Sign-in paused for this emailToo many wrong passwords. Try again in , or reset your password.

This account is suspendedContact your organisation's administrator.

This sign-in is for Operators onlyYour account isn't a Member of the Platform. Sign in at the regular address instead.

We couldn't send your codeSomething went wrong on our side. Try again in a moment.

We couldn't connect. Check your internet connection and try again.

Your password is setYou've joined Asuransi Demo. Sign in to start.

Password setSign in with your new password.

Use a different account

Check your email

We sent a 6-digit code to rina.santoso@insurance.test. It works for 5 minutes.

You can't resend the code yet. Wait a moment and try again.

Didn't get it?

This sign-in has ended

The code expired, or a wrong code was entered too many times. Start again for a new code.

No account? Ask your organisation's administrator for an invitation.

POST /api/auth/sign-in {email, password, client: "web"} returns only a challenge.
An unknown email, a Pending Person and a wrong password all show the same message.
5 wrong passwords per email lock it for 15 minutes. The countdown comes from retryAfter.
Suspended shows only after the password passes, and no code is sent.
The operator console's private entry point (:4009) shows this same page. A Person with no active Platform Membership gets 403 IDENTITY_PLATFORM_MEMBERSHIP_REQUIRED after the password step, and no code is sent. An Operator lands on Companies; pick an Operator under "Signed in as".
The code: 6 digits, valid 5 minutes, 5 attempts; attemptsLeft comes from 401 IDENTITY_CODE_INVALID. Resend after 60 s, at most 3 times.
A first sign-in (onboarding: true) goes to Account; any other goes to ?r=, else the first page the Person may open: Home, or Invitations with no organisation.

The two loading states, with the spinner on the clicked button only: no source drew them.
The code step lands by "Signed in as"; the first-sign-in path is reached from Account's panel.
The console's sign-in is the public card, with PR #567's refusal ("a Member of the Platform", the glossary's word): the mockup's Operators chip, heading and foot are older than the PR.

PR #572 → comment: an Operator lands on Companies after signing in on the console, not on Home, which the Platform doesn't have.
Every form's busy button (SubmitButton) keeps its size and colour with its label hidden under a spinner; the code only disables and greys it.
Landing without an organisation: after the code, go to Invitations, not Home.
After joining from an Invitation: the "Your password is set / You've joined…" notice, no intro line, and the email filled in. Today the code shows the plain "Password set".

"No account?…" sits under the card. (11 Oct 2026)
"Use a different account" is a back link with an arrow at the top of the code step. (11 Oct 2026)
Resend is a button that counts down, then becomes "Resend code". (11 Oct 2026)
Email not valid, Code with no resend left, Resend too soon, No connection are the design as built. (11 Oct 2026)
The console opens on Companies; the Platform has no Home. (12 Oct 2026)

From sign-in-and-sessions.html; the console's refusal from PR #567 (#325)