
Create users, assign roles, reset passwords and review who signed in and what changed. Administrators do not see invoice or operational data.
Connected (simulated)
The backend sends all portal e-mails through the Mailgun HTTP API. This mockup records each e-mail instead of sending it.
Domain:
From:
Placeholder values; the real domain and keys are set at deployment and kept out of the code.
Select an e-mail to preview it. Temporary passwords are hidden from Administrators.
Form sign-in (e-mail address and password) for all users, City staff and VOC users alike. No single sign-on.
At least 10 characters with upper-case, lower-case, number and symbol. Stored only as a salted hash.
Account locks after 5 failed sign-ins. An Administrator unlocks it.
Valid for 72 hours and must be changed at first sign-in.
30 minutes without activity.
Off — not required for now
Can be switched on later without redesign.
Microsoft SQL Server 2022 Standard
Cloud infrastructure (not City-hosted). Region and operator agreement to be confirmed.
Mailgun account (domain and keys set at deployment)