🎬 Simulate:

Account Activation

You have been invited to join DTVE e-Learning Platform as a staff member.

somsak.vongphachanh@dtve.edu.la

Invited Role

Instructor

Authentication Method

Choose how you would like to verify your identity and set up your account:

Email + Password

Set a password directly — no extra verification needed (the activation link already confirmed your identity).

Use your Google account — no password required. Your Google account email must match the invitation email (somsak.vongphachanh@dtve.edu.la).

Continue

Uses sub-flows:

🔀 SUC-IDP-03 — Authenticate via Google SSO

Screen Flow:

→ select Email+Password → Set Password → select Google → SUC-IDP-03 Google OAuth ↺ Google email mismatch (AF 3A.3A) → re-select method (inline, same page)

📝 Spec notes — UC-IDP.03 / SCR-IDP.12 (fields, actions, requirements)

Identity

Screen: SCR-IDP.12 — Activate Account Landing
Use case: UC-IDP.03 — Activate Staff Account

Brief description

The first screen in the staff/instructor account activation flow — shown after the system successfully validates the activation link (UC-IDP.03 step 1). Displays the invitee's context information — email and invited role (from UserInvitation + UserInvitationRole) — to confirm identity before the user selects one of two sign-in methods: Email + Password (navigates to the Set Password screen, SCR-IDP.14) or Google (redirects to Google OAuth for identity verification, then creates an account linked to the Google identity). Displays inline error messages if the Google account's email does not match the invitation email (AF 3A.3A); a generic Google sign-in failure is rendered inline by SUC-IDP-03 itself (no dedicated UC-level flow for that case). Differs from SCR-IDP.07 (Learner Login) and SCR-IDP.29 (Staff Login): displays the full email and invited role from UserInvitation for context, has no contact-input fields (email already known from the invitation token), does not offer SMS/email verification code or PIN options, and has no "Already have an account? Sign in" link.

Fields

invitee_email "Email" — text · lookup (fallback "") · always · read-only · must display in full, never masked
invited_role "Invited Role" — text · computed — Role.name joined via UserInvitationRole.role_id → Role.id, comma-separated if multiple roles · always · read-only
auth_method "Authentication Method" — enum [email_password, google_sso] · required · default: email_password

Actions

continue "Continue" — enabled when required_fields_valid · triggers UC-IDP.03-M-3

Additional requirements

Error messages (Google account email does not match the invitation, verification code delivery failure) must be displayed inline below the sign-in method selector — not as a browser alert dialog. [refs: NFR-09]
Keyboard focus order: Welcome region → sign-in method selector → action button — Tab/Shift+Tab must navigate correctly in the web browser. [refs: NFR-09]
invitee_email must be displayed in full — the email address must not be masked or have any characters replaced.