Security

Every capability starts with knowing who is allowed to do what.

The platform strengthens the production activation layer around student, parent, tutor, institution and administrator identities.

Invite / registerVerified account creation.

VerifyEmail and policy state.

AuthenticatePassword + MFA-ready flow.

AuthoriseRole, tenant and resource policy.

SessionSecure expiry and revocation.

AuditImportant security events.

MFA

TOTP/WebAuthn-compatible architecture before privileged access.

SSO

SAML/OIDC for eligible institution deployments.

SCIM

Lifecycle management for organisation-managed users.

RBAC

Least-privilege access across student, parent, tutor, institution and admin roles.