SL
SkillsLao Backoffice
Prototype
🎬 Simulate:

Forgot Password

Enter your account email — the system will send a one-time code to verify your identity.

Enter the email address associated with your staff or instructor account.
Continue Back to Login

Staff accounts are provisioned by administrators — contact your Super Administrator if you need access.

Uses sub-flows:

🔀 SUC-IDP-01 — Authenticate via Email OTP

Screen Flow (from flow.puml):

→ contact verified, OTP sent → Email OTP → SUC-IDP-01 → suspended / Google SSO only (error inline, end of flow) → [end]
📝 Spec notes — UC-IDP.22 / SCR-IDP.39 (fields, actions, requirements)
Identity
  • Screen: SCR-IDP.39 — Forgot Password Landing
  • Use case: UC-IDP.22 — Forgot Password
Brief description

Entry screen of the forgot password flow. Staff/Instructor/Super Administrator see Email OTP only (FEAT-IDP.05) — the OTP channel selector is hidden; Mobile OTP is learner-only. User enters their account email and presses "Continue" for the system to look up the account and dispatch an OTP. Handles inline errors for: account not found (AF-4A), Google-SSO-only account (AF-4B), suspended account (AF-4C), and OTP send failure (AF-5A) — all shown inline without navigating away.

Fields
  • otp_channel "OTP Delivery Method" — enum {email_otp, mobile_otp} · default email_otp · staff: hidden per FEAT-IDP.05; system defaults to email_otp
  • email "Email" — text · required · validation: format:email, max_length:255 · visible when otp_channel == email_otp (always in backoffice)
  • country_code "Country code" — text · read-only · default "+856" · learner-only; not rendered in backoffice
  • mobile_number "Mobile Number" — phone · learner-only; not rendered in backoffice
  • inline_message "Notification Message" — text · read-only · visible when form_error != null · values: account_not_found / google_only / account_suspended / otp_send_failed
Actions
  • continue "Continue" — enabled when required_fields_valid · triggers UC-IDP.22-M-4 → SUC-IDP-01 → /authenticate-via-email-otp/?returnUrl=/forgot-password/reset-password&cancelUrl=%2Fforgot-password%2F
  • back_to_login "Back to Login" — always enabled → /login-staff/
Additional requirements
  1. For email_otp → show only the email field; for mobile_otp → show country_code (+856, read-only) and mobile_number side by side. Mobile OTP is learner-only — not rendered in backoffice. [refs: —]
  2. All error cases must be shown inline in the "Inline message" region — the page must not navigate; the user can edit and retry immediately. [refs: —]
  3. Mobile OTP channel is only available to Learner accounts (FEAT-IDP.02). For Staff/Instructor/Admin, only email channel is shown (FEAT-IDP.05). [refs: FEAT-IDP.02, FEAT-IDP.05]
📝 Reviewer notes (overlay)

The page header block (icon circle + title + subtitle) must sit on the white background inside the card — render the text-center header as the first child of .card-body, above the form regions.

Source: Prototype/screen-notes/forgot-password/_uc.md — applied as override layer at generation time